•A 



(19) 



J 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 




(111 



EP 1 058 257 A1 



(12) 



EUROPEAN PATENT APPLICATION 

published In accordance with Art. 158(3) EPC 



(43) Date of publication: 

06.12.2000 Bulletin 2000/49 

» 

(21 ) Application number: 99961 388;8 

(22) Date of filing: 24.12.1999 



(51) int.ci7: G11B 20/10. G06F 12/14 

(86) International application number: 
PCT/JP99/07302 

(87) International publication number: 

WO 00/39800 (06.07.2000 Gazette 2000/27) 



(84) Designated Contracting States: 

AT BE CH CY DE DK ES Fl FR GB GR IE IT LI LU 
MC NL PT SE 

(30) Priority: 25.12.1998 JP 36941498 
17.02.1999 JP 3922299 

(71) Applicant: Sony Corporation 
Tokyo 141-0001 (JP) 

(72) Inventors: 

• TANABE, Mitsuru 
Shinagawa-ku, Tokyo 141-0001 (JP) 



• KAWAKAMI, Itaru 
Shinagawa-ku, Tokyo 141-0001 (JP) 

• ISHIGURO, Ryuji 
Shinagawa-ku, Tokyo 141-0001 (JP) 

• EZURA, Yuichi 
Shinagawa-ku, Tokyo 141-0001 (JP) 

(74) Representative: 

Korber, Martin, Dipl.-Phys. 
Wlitscherlich & Partner 
Patentanwalte 
Sonnenstrasse 33 
80331 Munchen (OE) 



(54) INFORMATION PROCESSING DEVICE AND METHOD, AND PROGRAM STORAGE MEDIUM 



(57) A contents database 114 memorizes the dis- 
criminating information for discriminating contents and 
the temporal infomnation as to the time of content dupli- 
cation associated with the discriminating information. A 
recording program 113 acquires the discriminating 
information of contents to be duplicated and duplicates 



the contents in association with the acquired discrimi- 
nating information and with the temporal information 
memorized in the contents database 1 14. This substan- 
tially prohibits duplication in large quantities without sig- 
nificantly impairing the interests of a user. 
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Description 

Technical Field 

[0001] This invention relates to an information 5 
processing method and apparatus and a program stor- 
age medium. More particularly, it relates to an informa- 
tion processing method and apparatus and a program 
storage medium in which duplication of contents can be 
limited appropriately. io 

Background Art 

[0002] There have so far been presented SCMS 
(Serial Copy Management System) and CGMS (Copy i5 
Generation Management System) as methods for limit- 
ing duplication of AV contents for which the copyright 
has been set» such as music or pictures. 
[0003] In these systenns, it is possible to duplicate 
contents A1 (first generation), for which the copyright 20 
has been set, to acquire (or record) contents A2 (sec- 
ond generation), however, it is not possible to duplicate 
the contents A2 (second generation) further to acquire 
contents A3 (third generation), as shown in Rg. 1. 

25 

Disclosure of the Invention 

[0004] However, in such case, the contents A1 can 

be repeatedly duplicated to acquire plural contents A2 

of the second generation, such that the copyright of the 30 

contents A1 is not protected sufficiently. 

[0005] So, as a method for enabling the contents Al 

to be duplicated only once, the UCS (Unit Copy System) 

has been proposed. However, in such case, the user is 

allowed to duplicate the contents only once even though 35 

the duplication is used for his or her private use, with the 

result that the method impairs the interests of the user. 

[0006] In view of the present status of the art. as 

described above, it is an object of the present invention 

to render it possible to substantially prohibit duplication 40 

in large quantities without Impairing the interests of the 

user 

[0007] In one aspect, the present invention provides 
an information processing apparatus including storage 
means for storing the information for discriminating con- 45 
tents and the time information for the time the contents 
have been duplicated, acquisition means for acquiring 
the information for discriminating contents to be dupli- 
cated, and duplication means for duplicating the con- 
tents in association with the discrimination information 50 
acquired by including acquisition means and the time 
information held in including storage means. 
[0008] In another aspect, the present invention pro- 
vides an information processing method including a 
storage step for storing the information for discriminat- 55 
ing contents and the time information for the time the 
contents have been duplicated, an acquisition step for 
acquiring the information for discriminating contents to 



be duplicated, and a duplication step for duplicating the 
contents in association with the discrimination informa- 
tion acquired by including acquisition step and the time 
information held in including storage step. 
[0009] In yet another aspect, the present invention 
provides a program storage medium having stored 
therein a computer-readable program, which program 
includes a storage step for storing the information for 
discriminating contents and the time information for the 
time the contents have been duplicated, an acquisition 
step for acquiring the information for discriminating con- 
tents to be duplicated and a duplication step for dupli- 
cating the contents in association with the 
discrimination information acquired by including acqui- 
sition step and the time information held in including 
storage step. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0010] 

Rg.1 illustrates the SCMS and CGMS. 
Rg.2 shows an embodiment of a speech data man- 
agement system according to the present inven- 
tion. 

Fig. 3 illustrates the structure of a personal compu- 
ter m the speech data management system. 
Rg.4 shows the structure of a portable device in the 
speech data management system. 
Rg.S is a block diagram for illustrating the structure 
of the function of the personal computer. 
Fig.6 illustrates an example of a window which a 
recording program in the personal computer dem- 
onstrates on a display. 

Rg.7 is a flowchart for illustrating the processing of 
copying from a compact disc to a HDD in the per- 
sonal computer. 

Rg.8 shows a flowchart for illustrating the process- 
ing of checking a terminal database at step 812 in 
the flowchart of Fig. 7. 

Rg.9 shows an example of a terminal database. 
Rg.10 illustrates a watermark. 
Rg.1 1 illustrates an example of a terminal data- 
base. 

Rgs 12A, 12B and 12C show flowcharts for illstrat- 
ing details of an operation of moving data from an 
HDD to a portable device. 

Fig.13 is a flowchart for illustrating the operation of 
checking e.g., the reproduction condition of a 
selected musical number at step 855 in the flow- 
chart of Rg.12A. 

Rg.1 4 illustrates the reproduction condition man- 
aged by the portable device 6. 
Rg.1 5 is a flowchart for illustrating details of the for- 
mat conversion processing at step 858 in the flow- 
chart of ng.12A. 

Rgs.16A, 168 and 16C are flowcharts for illustrat- 
ing the operation of copying data from an HDD 21 
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to a portable device 6. 

Fig. 17 is a flowchart for illustrating the operation of 
moving data from the portable device to the HDD. 
Fig. 18 is a flowchart for illustrating the operation of 
copying data from the portable device 6 to the HDD. 
Fig. 19 is a flowchart for illustrating the processing 
of copying data from an EMD registration server to 
the HDD. 

Rg.20 is a flowchart for illustrating details of the 
operation of processing for billing at step S204 in 
the flowchart of Fig. 19. 
Fig.21 illustrates a billing log. 
Figs.22A and 22B are flowcharts for illustrating the 
operation of copying data from the IEC60958 termi- 
nal of the personal computer to the hard disc 15. 
Figs.23A and 23B are flowcharts for illustrating the 
operation of outputting data from the HDD to the 
IEC60958 terminal. 

Fig.24 is a flowchart for illustrating the operation of 
checking e.g., the reproduction condition at step 
S275 in the flowchart of Fig.23A. 
Figs.25A and 25B are flowcharts for illustrating the 
processing for outputting data from the HDD 
through the portable device. 
Fig. 26 illustrates the function of a non-vofatile mem- 
ory provided on an adapter of the personal compu- 
ter. 

Fig.27 is a flowchart for illustrating the adapter 
operation. 

Fig.28 illustrates the inside of the adapter. 
Figs.29A and 298 illustrate typical structure of the 
non-volatile memory. 

Fig.30 shows an illustrative inner structure of the 
non -volatile memory. 

BEST MODE FOR CARRYING OUT THE INVENTION 

[001 1 ] Referring to the drawings, preferred embodi- 
ments of the present invention will be explained in 
detail. 

[0012] Fig. 2 shows an embodiment of a speech 
data management system according to the present 
invention. A personal computer 1 is connected to a net- 
work 2 constituted by, for example. Local Area Network 
of Internet. The personal computer 1 transforms music 
data received from EMD (Electrical Music Distribution) 
servers 4-1 to 4-3 or read from a CD (Compact Disc), as 
later explained, referred to below as contents, in accord- 
ance with a pre-set compression system, such as 
ATRAC3 (trade mark), and encrypts the transformed 
music data in accordance with an encryption system 
such as DES (Data Encryption Standard) to record the 
encrypted music data. 

[0013] The personal computer 1 records data of 
usage rules, representing the usage rules of contents, 
in association with the contents recorded in the 
encrypted fomi. For example, the data of the usage 
rules indicate that the contents corresponding to the 



data of the usage rules can be used simultaneously on 
three portable devices, also termed PDs. 6-1 to 6-3, 
copied or moved to another personal computer. It is 
noted that, if the contents are stored in the portable 
5 devices 6-1 to 6-3 by copying, the contents recorded on 
the personal computer 1 can be used. There are occa- 
sions wherein limitations are imposed on the number of 
times the contents can be stored in the portable devices 
6-1 to 6-3. In this case, the number of times cannot be 
10 increased. It is also noted that, if the contents have 
been stored by moving in the portable devices 6-1 to 6- 
3. the contents stored in the personal computer 1 cease 
to be usable. The data of the usage rules will be dis- 
cussed subsequently in detail. 
15 [0014] The personal computer 1 stores the con- 
tents, recorded in the encrypted form, in the portable 
device 6-1. connected thereto, over a USB (Universal 
Serial Bus) cable 7-1, along with data pertinent to the 
contents, such as name of music number or playback 
20 conditions), while updating the data of the usage rules, 
associated with the stored contents, in connection with 
the storage in the portable device 6-1. This processing 
is referred to below as checkout. In more detail, on 
doing such check-out, the number of times of possible 
25 checkout of the data of the usage rules, associated with 
the contents, as recorded by the personal computer 1, 
is decremented by one. If the number of times of possi- 
ble checkout is 0, the corresponding contents cannot be 
checked out. 

30 [0015] The personal computer 1 stores the con- 
tents, recorded in the encrypted form, in the portable 
device 6-2, connected thereto, over a USB cable 7-2, 
along with data pertinent to the contents, while updating 
the data of the usage rules, associated with the stored 

35 contents, in connection with the storage in the portable 
device 6-2. The personal computer 1 stores the con- 
tents, recorded in the encrypted form, in the portable 
device 6-3, connected thereto, over a USB cable 7-3, 
along with data pertinent to the contents, while updating 

^0 the data of the usage rules, associated with the stored 
contents, in connection with the storage in the portable 
device 6-3. 

[0016] The personal computer 1 also causes the 
portable device 6-1 connected thereto to erase or make 

45 unusable the contents checked out by the personal 
computer 1 to the portable device 6-1, though a USB 
cable 7-1 to update data of the usage rules correspond- 
ing to the erased contents. This operation referred to 
below as check-in. More specifically, on check-in, the 

50 number of times of possible checkout of the data of 
usage rules of corresponding contents recorded by the 
personal computer 1 is incremented by one. 
[0017] The personal computer 1 also causes the 
portable device 6-2 connected thereto to erase or make 

55 unusable the contents checked out by the personal 
computer 1 to the portable device 6-2, through a USB 
cable 7-2, to update data of the usage rules correspond- 
ing to the erased contents. The personal computer 1 
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also causes the portable device 6-3 connected thereto 
to erase or make unusable the contents checked out by 
the personal computer 1 to the portable device 6-3. 
through a USB cable 7-3. to update data of the usage 
rules corresponding to the erased contents. 
[0018] The personal computer 1 is unable to check- 
in the contents checked out by another personal compu- 
ter, not shown, to the portable device 6-1 . The personal 
computer 1 is unable to check-in the contents checked 
out by the other personal computer, not shown, to the 
portable device 6-2. Similarly, the personal computer 1 
is unable to check-in the contents checked out by the 
other personal computer, not shown, to the portable 
device 6-3. 

[0019] When the personal computer 1 starts to 
acquire the contents from EMD servers 4-1 to 4-3, an 
EMD registration server 3 is responsive to a request 
from the personal computer 1 to transmit an authentica- 
tion key necessary for reciprocal authentication 
between the personal computer 1 and the EMD servers 
4-1 to 4-3, through the network 2, as well as to transmit 
a program for connection to the EMD servers 4-1 to 4-3 
to the personal computer 1 . 

[0020] The EMD server 4-1 is responsive to a 

request by the personal computer 1 to send contents to 
the personal computer 1 over the network 2 along with 
data pertinent to the contents, such as name of the 
musical number or limitation on reproduction. The EMD 
server 4-2 is responsive to a request by the personal 
computer 1 to send contents to the personal computer 1 
over the network 2 along with data pertinent to the con- 
tents. The EMD server 4-3 also is responsive to a 
request by the personal computer 1 to send contents to 
the personal computer 1 over the network 2 along with 
data pertinent to the contents. 

[0021] The contents supplied by each of the EMD 
servers 4-1 to 4-3 are compressed in accordance with 
the same or different compression systems. The con- 
tents supplied by each of the EMD servers 4-1 to 4-3 
are also compressed in accordance with the same of 
different encryption systems. 

[0022] A WWW (World Wide Web) server 5-1 is 
responsive to the request by the personal computer 1 to 
send data pertinent to a CD the contents of which have 
been read out. such as album name or a manufacturing 
firm of the CD, and data corresponding to the contents 
read out from the CD, such as name of the musical 
number or that of a composer, to the personal computer 
1 over the network 2. The WWW server 5-2 is respon- 
sive to the request by the personal computer 1 to send 
data pertinent to a CD, the contents of which have been 
read out, and data corresponding to the contents read 
out from the CD, to the personal computer 1 over the 
network 2. 

[0023] The portable device 6-1 stores the contents 
sent from the personal computer 1 , that is the checked- 
out contents, along with the data pertinent to the con- 
tents, such as name of the musical number or limitation 



on reproduction. The portable device 6-1 reproduces 
the stored contents, based on the data pertinent to the 
contents-related data, to output the reproduced con- 
tents to a headphone, not shown. 
5 [0024] For example, when contents are about to be 
reproduced a number of times exceeding the number of 
times of reproduction as limitations on the reproduction, 
stored as the contents-related data, the portable device 
6-1 halts the reproduction of the relevant contents. 
10 When contents are about to be reproduced after a 
number of times exceeding the number of times of 
reproduction as limitations on the reproduction, stored 
as the contents-related data, the . portable device 6-1 
halts the reproduction of the relevant contents. 
15 [0025] The user dismounts the portable device 6-1 , 
which has stored the contents, from the personal com- 
puter 1 , caries it about and reproduces the stored con- 
tents to listen to the music corresponding to the 
contents by e.g., a headphone. 
20 [0026] The portable device 6-2 stores the contents 
supplied from the personal computer 1 along with data 
pertinent to the contents. The portable device 6-2 repro- 
duces the stored contents, based on the contents- 
related data, to output the reproduced data to e.g., a 
25 headphone, not shown. The user dismounts the porta- 
ble device 6-2, which has stored the contents, from the 
personal computer 1 , caries it about and reproduces the 
stored contents to listen to the music corresponding to 
the contents by e.g., a headphone. 
30 [0027] The portable device 6-3 stores the contents 
supplied from the personal computer 1 along with data 
pertinent to the contents. The portable device 6-3 repro- 
duces the stored contents, based on the contents- 
related data, to output the reproduced data to e.g., a 
35 headphone, not shown. The user dismounts the porta- 
ble device 6-3, which has stored the contents, from the 
personal computer 1 , carries it about and reproduces 
the stored contents to listen to the music corresponding 
to the contents by e.g.. a headphone. 
40 [0028] In the following, if it is unnecessary to distin- 
guish the portable devices 6-1 to portable device 6-3. it 
is simply referred to as a portable device 6. 
[0029] Fig. 3 illustrates the structure of the personal 
computer 1. A CPU (Central Processing Unit) 11 actu- 
45 ally executes a variety of application programs, details 
of which will be explained later on, and an OS (Operat- 
ing System). A ROM (Read-only Memory) 12 in general 
stores basically fixed data, among the programs used 
by the CPU 11 or parameters used for calculations. A 
50 RAM (Random-Access Memory) 13 stores the pro- 
grams used by the CPU in the processing by the CPU 
1 1 and parameters incidentally changed in execution of 
the programs. These components are interconnected 
by a host bus 14 constituted e.g., by a CPU bus. 
55 [0030] The host bus 14 is connected over a bridge 
15 to an external bus 16, such as a PCI (Peripheral 
Component Interconnect/Interface) bus. 
[0031 ] A keyboard 1 8 is acted on by the user when 
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a variety of commands are inputted to the CPU 11 . A 
mouse 19 is acted on by the user when commanding or 
selecting a point on a screen of a display 20. The dis- 
play 20 Is made up e.g.. of a liquid crystal device or a 
CRT (Cathode Ray Tube) and demonstrates a variety of 
the information by texts or images. A HDD (Hard Disc 
Device) 21 drives a hard disc to cause it to record 
and/or reproduce the program executed by the CPU 1 1 
or the information. 

[0032] A drive 22 reads out data or programs 
recorded on a magnetic disc 41, an optical disc 42 
(inclusive of a CD), a magneto-optical disc 43 or a sem- 
iconductor memory 44. loaded thereon, to route the 
data or the program to the RAM 1 3 connected to the 
drive 22 through an interface 17. an external bus 16. a 
bridge 15 and a host bus 14. 

[0033] To a USB port 23-1 is connected the porta- 
ble device 6-1 over a USB cable 7-1 . The USB port 23- 

1 outputs data supplied from the HDD 21 . CPU 1 1 or the 
RAM 13 over the interface 17, external bus 16. bridge 
15 or the host bus 14, such as contents or commands 
for the portable device 6-1 , to the portable device 6-1 . 
[0034] To a USB port 23-2 is connected the porta- 
ble device 6-2 over a USB cable 7-2. The USB port 23- 

2 outputs data supplied from the HDD 21 , CPU 1 1 or the 
RAM 13 over the interface 17, external bus 16. bridge 
15 or the host bus 14, such as contents or commands 
for the portable device 6-2. to the portable device 6-2. 
[0035] To a USB port 23-3 is connected the porta- 
ble device 6-3 over a USB cable 7-3. The USB port 23- 

3 outputs data supplied from the HDD 21 , CPU 11 or the 
RAM 13 over the interface 17. external bus 16, bridge 
15 or the host bus 14, such as contents or commands 
for the portable device 6-3, to the portable device 6-3. 
[0036] A speech input/output interface 24. having 
an lEC (International Electrotechnical Commission) 
60958 terminal, executes interfacing processing of the 
digital speech input/output or the analog speech 
input/output. A speaker 45 outputs a pre-set speech 
corresponding to the contents based on the speech sig- 
nal supplied from the speech input/output interface 24. 
[0037] The components from the keyboand 18 to 
the speech input/output interface 24 are connected to 
the interface 17 which in turn is connected to the CPU 
1 1 over the external bus 16. bridge 15 and the host bus 
14. 

[0038] A communication unit 25, to which is con- 
nected the network 2, transmits data supplied from the 
CPU 1 1 or the HDD 21 , such as requests for registration 
or requests for transmission of contents, in a packet of a 
pre-set form, and transmits the resulting data over the 
network 2, while outputting the data stored in the 
received packet, such as authentication key or contents, 
to the CPU 11, RAM 13 or to the HDD 21. 
[0039] A CPU 32 of an adapter 26. constructed 
monolithically as a semiconductor IC and loaded on the 
personal computer 1 , cooperates with the CPU 1 1 of the 
personal computer 1 over the external bus 16, bridge 15 



and the host bus 14, to execute a variety of processing 
operations. A RAM 33 stores data or programs neces- 
sary for the CPU 1 1 to execute the variable processing 
operations. A non-volatile memory 34 stores data that 
5 needs to be held even after the power source of the per- 
sonal computer 1 is turned off In a ROM 36 is stored a 
program for decoding an encrypted program transmitted 
from the personal computer 1 . A RTC (Real Time Clock) 
35 executes time measurement operation to provide the 
10 time information. 

[0040] The communication unit 25 and the adapter 
26 are connected over the external bus 16, bridge 15 
and the host bus 14 to the CPU 1 1 . 
[0041] In the following, if there is no necessity for 

15 distinguishing the USB ports 23-1 to 23-3 from one 
another, these are simply referred to as USB ports 23. 
Similarly, if there is no necessity for distinguishing the 
USB cables 7-1 to 7-3 from one another, these are sim- 
ply referred to as USB cables 7. 

20 [0042] The structure of the portable device 6 is 
hereinafter explained with reference to Fig. 4. A power 
source circuit 52 converts the source voltage supplied 
from a dry cell 51 to an internal power of a pre-set volt- 
age which is supplied to components from the CPU 53 

25 to a display unit 67 to drive the portable device 6 in its 
entirety. 

[0043] If a USB controller 57 is connected over a 
USB connector 56 and the USB cable 7 to the personal' 
computer 1 . the USB controller 57 routes the contents 
30 transmitted from the personal computer 1 over an inter- 
nal bus 58 to the CPU 53. 

[0044] The contents are made up of 64-byte-per- 
packet data and are transmitted from the personal com- 
puter 1 at a transfer rate of 12 Mbits/sec. 

35 [0045] The contents transmitted to the portable 
device 6 are made up of a header and speech data 
(data corresponding to speech data as the subject of 
the contents). In the header are stored, in addition to a 
filename, a header size, contents keys, file size, codec 

40 ID and the file information, data on reproduction limita- 
tion necessary in reproduction limiting processing, start 
date and time, end date and time, limitation on the 
number of times, and a number of times of reproduction 
count. The speech data is data corresponding to the 

45 speech signals of a pre-set musical number This data is 
data encoded in accordance with an encoding system, 
such as ATRAC 3. and which is encrypted subse-- 
quently. 

[0046] The header size represents the data length • 
50 of a header, such as 33 bytes, whilst the file size repre- 
sents the data length of speech data, such as 
33.636.138 bytes. 

[0047] A content key is a key used for decoding 
encrypted speech data and is transmitted from the per- 
55 sonal computer 1 to the portable device 6 in a state in 
which it is encrypted based on a session key (transient 
key) generated by processing of reciprocal authentica- 
tion between the personal computer 1 and the portable 
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device 6. 

[0048] When the portable device 6 Is connected 
over the USB cable 7 to the USB port 23 of the personal 
computer 1. the portable device 6 and the personal 
computer 1 execute the processing of reciprocal 5 
authentication. This processing of reciprocal authenti- 
cation may, for example, be a reciprocal authentication 
processing of the challenge-response system. Mean- 
while, a DSP 59 of the portable device 6, executing the 
authentication processing of the challenge-response io 
system, executes the processing of decrypting (decod- 
ing) processing. 

[0049] The challenge-response system is such a 
system in which the portable device 6 responds to a 
value generated by the personal computer 1 (challenge) is 
with a value generated using a confidential key which 
the portable device 6 co-owns with the personal compu- 
ter 1 (response). In the reciprocal authentication 
processing of the challenge-response system, the value 
generated by the personal computer 1 is changed every 20 
authentication processing, so that, if the value gener- 
ated using the confidential key and outputted by the 
portable device 6 is read out and used in a so-called dis- 
guised attack, the value used in the reciprocal authenti- 
cation differs in the next reciprocal authentication, and 25 
hence the personal computer 1 is able to detect the illic- 
itness. 

[0050] The codec ID is an ID corresponding to the 
speech data encoding system. Specifically, a codec ID 
"1" corresponds to ATRAC 3, whilst a codec ID "0" cor- 30 
responds to MPS (MPEG (Moving Picture Experts 
Group) Audio Layer-3). 

[0051] The filename is data obtained on converting 
a content file corresponding to contents, recorded by 
the personal computer 1, as later explained, into ASCII 35 
((American National Standard Code for Information 
Interchange) code, whilst the file information is data 
obtained on converting the name of a music number, 
name of an artist, name of a lyric writer or the name of 
a composer into the ASCII code. 40 
[0052] The reproduction limitation data is data 
specifying whether or not the period during which repro- 
duction of contents is possible, that is start date and 
time or end date and time, or number of times limitation, 
that is limitation on the number of times of reproduction, 45 
is set. If the number of times of limitation has been set, 
or if the period during which reproduction is possible is 
set. "1" or "2" is set for the reproduction limitation data, 
respectively If neither the number of times limitation nor 
the period during which reproduction is possible is set, so 
that is if the apparatus is purchased on spot, "O" is allo- 
cated for the reproduction limitation data. 
[0053] If the reproduction limitation data is "2", the 
start date and time and end date and time are data indi- 
cating the period during which reproduction is possible. 55 
For example, if the start date and time is "00040F" and 
end date and time is "00070F", the corresponding con- 
tents can be reproduced as from April 15, 2000 until 



July 15, 2000. 

[0054] Similarly, as for the number of times limita- 
tion and the number of times of reproduction counter, if 
the reproduction limitation data Is "1" or "2", the number 
of times of limitation is the number of times of possible 
reproduction, as previously set in association with the 
contents, whilst the number of times of reproduction 
counter indicates the number of time the contents have 
been reproduced. The number of times of reproduction 
is innovated by the CPU53 when the processing .for 
reproducing the contents has been carried out. For 
example, if the number of times limitation is "02**. the 
number of times of possible reproduction of the con- 
tents is 2, whereas, if the number of times limitation is 
"01 the number of times the contents have been repro- 
duced is 1 . 

[0055] For example, if the reproduction limitation 
data is "2" the start date and time is "00040F" and the 
end date and time is "00070F", with the reproduction 
limitation data being **2'' the portable device 6 is able to 
reproduce the corresponding contents repeatedly twice 
a day during the period as from April 15, 2000 until July 
15. 2000. 

[0056] For example, if the reproduction limitation 
data is "I", the start date and time is *'000000" and the 
end date and time is "000000", with the reproduction 
limitation data being "Oa" and the number of times of 
reproduction counter being "05', there is no limitation on 
the corresponding contents as for the period during 
which reproduction is possible, with the number of times 
of possible reproduction being 10 and with the number 
of times of reproduction performed being 5. 
[0057] If the portable device 6 has received a con- 
tent write command, along with the contents, from the 
personal computer 1. the CPU 53, adapted for execut- 
ing the main program read out from the ROM 55 to the 
RAM 54. receives a write command and controls a flash 
memory controller 60 to cause the contents received 
from the personal computer 1 to be written in a flash 
memory 61. 

[0058] The flash memory 61 has a recording capac- 
ity of approximately 64 MBytes and stores the contents 
(speech data). There is also stored in the flash memory 
61 a reproduction code for expanding the speech data 
compressed in accordance with a preset compression 
system. 

[0059] Meanwhile, the flash memory 61 can be 
mounted on or dismounted from the portable device 6. 
[0060] If a playback command by the user, corre- 
sponding to the pushing of a play/stop button, not 
shown, is sent through an operation key controller 62 to 
the CPU 53. the latter causes a flash memory controller 
60 to read out the playback code and the speech data 
from the flash memory 61 to transfer the read-out data 
to a DSP 59. 

[0061] The DSP 59 corrects the speech data for 
en'ors in accordance with the CRC (Cyclic Redundancy 
Check) system, based on the playback code transferred 
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from the flash memory 61, reproduces the data and 
sends the reproduced data, Indicated D1 in Fig.4. to a 
digital/analog conversion circuit 63. 
[0062] The DSP 59 is constructed monolithlcally 
with a transmission circuit, not shown, and reproduces 
the speech data based on master clocks MCLK from an 
externally mounted quartz oscillator 59A, while sending 
the master clocks MCLK, operating clocks LRCLK. 
made up of bit clocks BCLK of a pre-sej frequency, gen- 
erated by an Internal oscillation circuit based on the 
master clocks MCLK. and frame-based L-channel and 
R-channel clocks, to a digital/analog conversion circuit 
63. 

[0063] When reproducing speech data, the DSP 59 
sends the aforementioned operating clocks to the dig- 
ital/analog conversion circuit 63 in accordance with the 
reproduction code. When not reproducing speech data, 
the DSP 59 halts supply o the operating clocks, in 
accordance with the reproduction code, to halt the dig- 
ital/analog conversion circuit 63 to decrease the power 
consumption of the entire portable device 6. 
[0064] Similarly, quartz oscillators 53A, 57A of the 
CPU 53 and the USB controller 57 are externally 
mounted, so that the CPU 53 and the USB controller 57 
execute pre-set processing based on the master clocks 
MCLK supplied from the oscillators 53A. 57A. 
[0065] By the above-described structure of the port- 
able device 6, clock generating modules for supplying 
clocks to respective circuit blocks, such as CPU 53. 
DSP 59 or the USB controller 57, are unnecessary, 
thereby simplifying and reducing the size of the circuitry. 
[0066] The digital/analog conversion circuit 63 con- 
verts reproduced speech data into analog speech sig- 
nals which are sent to an amplifier circuit 64. This 
amplifier circuit 64 then amplifies the speech signals to 
send the amplified speech signals to a headphone, not 
shown, via a headphone jack 66. 

[0067] Thus, when a play/halt button, not shown, is 
acted on, the portable device 6 reproduces speech data 
stored in the flash memory 61 , under control by the CPU 
53, If the play/stop button is pushed during reproduc- 
tion, the portable device 6 halts the reproduction of the 
speech data. 

[0068] If the play/stop button is again pushed after 
halting, the portable device 6 reinitiates reproduction of 
the speech data from the previous stop position, under 
control by the CPU 53. If a few seconds have elapsed 
with the play/stop button remaining unactuated after 
halting of the reproduction by previous actuation of the 
play/stop button, the portable devtee 6 automatically 
interrupts the power source to save the power con- 
sumption. 

[0069] Meanwhile, if the play/stop button is thrust 
after turning off of the power source, the portable device 
6 reproduces speech data as from the first musical 
number, without reproducing the speech data as from 
the previous stop position. 

[0070] On the other hand, the CPU 53 of the porta- 



ble device 6 controls an LCD controller 68 to demon- 
strate on the display unit 67 such information as the 
state of the playback mode, e.g.. repetitive reproduction 
or intro-reproduction, equalizer adjustment, that is gain 
5 adjustment corresponding to the frequency range of the 
speech signals, number of a musical number, play time, 
states of play, stop, fast feed or fast rewind, speech 
sound level , residual capacity of the dry cell 51. etc. 
[0071] Moreover, the portable device 6 stores the 
10 so-called FAT (File AllocationTtable), such as the 
number of contents written in a flash memory 80. block 
positions of the flash memory 61 in which respective 
contents are written, and a variety of other memory stor- 
age information, in the EEPROM 68. 
15 [0072] lathe present embodiment, speech data are 
handled with 64 KBytes as one block, and a block posi- 
tion con-esponding to the contents of a music number is 
stored in the FAT. 

[0073] If, in storing the FAT in the flash memory 61 , 
20 the contents of the first music number, for example, are 
written in the flash memory 61 under control by the CPU 
53, the block position corresponding to the contents of 
the first musical number is written as the FAT in the flash 
memory 61 . If then the contents of the second musical/ 
25 number are written in the flash memory 61, the block^ 
position corresponding to the contents of the second 
music number is written as FAT in the flash memory 61. 
specifically, in the same area as that for the first musk:, 
number. 

30 [0074] In this manner, the FAT Is rewritten each time 
the contents are written in the flash memory 61 . In addi- 
tion, for data protection, the same data is written as 
reserve data in duplex. 

[0075] If FAT is written in the flash memory 61, the 
35 same area in the flash memory 61 is rewritten twice, for 
writing of sole contents, so that the number of times of 
rewriting prescribed for the flash memory 61 is reached 
with a smaller number ot times of contents writing to 
render the rewriting of the flash memory 61 impossible. 
40 [0076] So, the portable device 6 causes the FAT to 
be stored in the EEPROM 68 to decrease the frequency 
of rewriting of the flash memory 61 corresponding to the 
writing of sole contents. 

[0077] By storing the FAT having a larger number of 
45 times of rewriting In the EEPROM 68, it is possible with 
the portable device 6 to increase the number of times of 
possible writing of contents to a factor of not less than a 
few tens as compared to the case of storing the FAT in 
the flash memory 61. Moreover, since the CPU 53 
50 causes the FAT to be written in an overwriting fashion in: 
the EEPROM 68, the frequency of rewriting of the same 
area in the EEPROM 68 can be diminished to prevent 
the EEPROM 68 from becoming unable to be rewritten 
in a shorter time. 
55 [0078] When connected to the personal computer 1 
over the USB cable 7. the portable device 6 recognizes 
this connection, based on an interrupt signal supplied 
from the USB controller 57 to the CPU 53. This connec- 
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tion is referred to below as USB connection 
[0079] When the portable device 6 has recognized 
that fact that it has been USB connected. It Is supplied 
with an external power of a pre-set current value fronn 
the personal computer 1 , over the USB cable 7. On the 5 
other hand, the portable device 6 controls a power 
source circuit 52 to halt the power supply from the dry 
cell 51. 

[0080] When USB connected, the CPU 53 halts the 
processing of reproducing speech data by the DSP 59. io 
So, the CPU 53 performs control such that the external 
power supplied from the personal computer 1 is pre- 
vented from exceeding a predetermined current value 
so that the external power of a predetermined current 
value will be supplied at all times. 15 
[0081] Thus, on USB connection, the CPU 53 
switches from the power supplied from the dry cell 51 to 
that supplied from the personal computer 1 , so that the 
external power from the personal computer with low unit 
power cost is used to reduce the power consumption of 20 
the dry cell 51 with high unit power price thus elongating 
the durability of the dry cell 51 . 

[0082] When fed with the external power over the 
USB cable 7 from the personal computer 1 . the CPU 53 
halts the reproducing processing of the DSP 59 to 25 
reduce the radiation from the DSP 59 thereby further 
reducing the radiation of the entire system inclusive of 
the personal computer 1 . 

[0083] ng.5 is a block diagram for illustrating the 
function of the personal computer 1 realized on execu- 30 
tlon of a pre-set program of the CPU 11. A contents 
management program 1 1 1 is made up of a plurality of 
programs, such as an EMD selection program 131, a 
checkin/checkout management program 132, a tran- 
scrypt program 133, a transcodec program 134, an 35 
encryption program 135, a usage rule conversion pro- 
gram 136, a signature management program 137. an 
authentication program 138, a decoding program 139, a 
driver for PD 1 40, a driver for purchase 1 41 and a driver 
for purchase 1 42. 40 
[0084] The contents management program 1 1 1 is 
stated by e.g., a shuffled instruction or an encrypted 
instruction so that the processing contents are hidden 
from outside to render it difficult to read the processing 
contents from outside, for example, so that the user is 45 
unable to identify the instruction even if the user directly 
reads out the contents management program 111. 
[0085] The EMD selection program 131 Is not 
included In the contents management program ill 
when installing the contents management program 111 50 
on the personal computer 1 , and is received from the 
EMD registration server 3 over the network 2 in the 
EMD registration which will be explained subsequently. 
The EMD selection program 131 selects connection to 
one of the EMD servers 4-1 to 4-3 to cause an applica- 55 
tion for purchase 1 1 5 or drivers for purchase 1 41 or 1 42 
to execute communication with one of the EMD servers 
4-1 to 4-3. such as downloading of contents In purchas- 
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ing the contents. 

[0086] The checkin/checkout management pro- 
gram 132 sets checkin and checkout, while checking 
out the contents stored in contents files 161-1 to 161 -N 
to one of the portable devices 6-1 to 6-3 or checking in 
the contents stored in the portable devices 6-1 to 6-3, 
based on the usage rule files 162-1 to 162-N recorded 
in a contents database 1 1 4. 

[0087] The checkin/checkout management pro- 
gram 132 innovates data of the usage rules stored in 
the usage rule files 162-1 to 162-N recorded in the con- 
tents database 114 in association with the checkin or 
checkout processing. 

[0088] The transcrypt program 133 converts the 
encryption system of contents received by the applica- 
tion for purchase 115 from the EMD server 4-1, the 
encryption system of contents received by the driver for 
purchase 141 from the EMD server 4-2 or the encryp- 
tion system of contents received by the driver for pur- 
chase 142 from the EMD server 4-3 into the encryption 
system which is the same as the contents stored in the 
contents files 161-1 to 161 -N recorded in the contents 
database 1 1 4. 

[0089] When checking out the contents to the port- 
able device 6-1 or 6-3, the transcrypt program 133 con- 
verts the checked-out contents into the encryption 
system whk:h can be used by the portable device 6-1 or 
6-3. 

[0090] The transcodec program 134 converts the 
compression system for contents received by the appli- 
cation for purchase 115 from the EMD server 4-1, that 
for contents received by the driver for purchase 141 
from the EMD server 4-2 and that for contents received 
by the driver for purchase 1 42 from the EMD server 4-3 
into the compression system which is the same as that 
of the contents stored in the contents files 1 6 1 -1 to 1 61 - 
N recorded by the contents database 1 14. 
[0091] The transcodec program 134 encodes the 
contents read out from e.g., a CD and sent from a 
recording program 113 in an uncompressed form in 
accordance with the same encoding system as that for 
the contents stored in the contents files 161-1 to 161-N 
recorded by the contents database 1 14. 
[0092] When checking out contents to the portable 
device 6-1 or 6-3, the transcodec program 134 converts 
the checked-out contents Into a compression system 
that can be used by the portable device 6-1 or 6-3. 
[0093] The encryption program 135 encrypts the 
non-encrypted contents read from a CD and sent from 
the recording program 113 in accordance with the 
encryption system which is the same as of the contents 
stored in the contents files 161-1 to 161-N recorded on 
the contents database 1 1 4. 

[0094] The usage rule conversion program 136 
converts the format of the data indicating usage rules 
for contents received by the application for purchase 
1 1 5 over the network 2 from the EMD server 4-1 , or so- 
called Usage Rule, the data indicating usage rules for 
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contents received by the driver for purchase 141 over 
the network 2 from the EMD server 4-2 or the data indi- 
cating usage rules for contents received by the driver for 
purchase 142 over the network 2 from the EMD server 
4-3. into the same format as the usage rule data stored 
in the usage rule files 162-1 to 162-N recorded by the 
contents database 1 14. 

[0095] On the other hand, the usage rule conver- 
sion program 136 when checking out contents to the 
portable device 6-1 or 6-3 converts the usage rule data 
corresponding to the contents to be checked out into the 
usage rule data that may be used by the portable device 
6-1 or 6-3. 

[0096] The signature management program 137 
before processing for checkin or checkout detects pos- 
sible falsification of the usage rule data based on the 
signature contained in the usage rule data stored in the 
usage rule files 162-1 to 162-N recorded in the contents 
database 114. The signature will be explained later on. 
The signature management program 137 innovates the 
signature contained in the usage rule data in associa- 
tion with updating of the usage rule data stored in the 
usage rule files 162-1 to 162-N recorded in the contents 
database 114 as a result of the checkin or checkout 
processing. 

[0097] The authentication program 138 executes 
the processing for reciprocal authentication between 
the contents management program 1 1 1 and the appli- 
cation for purchase 1 1 5 and the processing fore recipro- 
cal authentication between the contents management 
program 111 and the driver for purchase 141, The 
authentication program 138 memorizes an authentica- 
tion key used in the processing of reciprocal authentica- 
tion between the EMD server 4-1 and the application for 
purchase 1 1 5, that between the EMD server 4-2 and the 
driver for purchase 141 and that between the EMD 
server 4-3 and the driver for purchase ^ 42. 
[0098] The authentication key used by the authenti- 
cation program 138 in the processing of reciprocal 
authentication is not stored in the authentication pro- 
gram 1 38 when the contents management program 1 1 1 
is installed on the personal computer 1 . The authentica- 
tion key is supplied from the EMD registration server 3 
and memorized in the authentication program 1 38 when 
the registration processing is regulariy executed by a 
display operation command program 112. 
[0099] When the contents stored in the contents 
files 161-1 to 161 -N recorded by the contents database 
1 1 4 are reproduced by the personal computer 1 , the 
decoding program 1 39 decodes the contents. 
[0100] When checking out pre-set contents to the 
portable device 6-2 or checking in pre-set contents from 
the portable device 6-2. the driver for PD 140 sends 
contents or commands for causing the portable device 
6-2 to execute pre-set processing to the portable device 
6-2. 

[0101] When checking out pre-set contents to the 
portable device 6-1 or checking in pre-set contents from 



the portable device 6-1. the driver for PD 140 sends 
contents or commands for causing a device driver 1 1 6- 

1 to execute pre-set processing to the device driver 1 1 6- 
1. 

5 [0102] When checking out pre-set contents to the 
portable device 6-3 or checking in pre-set contents from 
the portable device 6-3. the driver for PD 140 sends 
contents or commands for causing a device driver 1 1 6- 

2 to execute pre-set processing to the device driver 1 1 6- 
10 2. 

[0103] The driver for purchase 141 is a so-called 
plug-in program which is installed along with the con- 
tents management program 1 1 1 and which is supplied 
from the EMD registration servers over the network 2 or 
15 is supplied as it is recorded on a pre-set CD. 

[0104] The driver for purchase 141 requests trans- 
mission of pre-set contents to the EMD server 4-2 over 
the network 2. while receiving contents from the EMD 
server 4-2. When receiving contents from the EMD 
20 server 4-2, the driver for purchase 141 executes 
processing for billing. 

[0105] The driver for purchase 142 is a program 
installed along with the contents management program 
1 1 1 and requests transmission of pre-set contents from 
25 the EMD server 4-3 while receiving contents from the 
EMD server 4-3. The driver for purchase 142 when 
receiving the contents from the EMD server 4-3 exe- 
cutes the processing for billing. 

[0106] The display operation command program 
30 112 demonstrates a picture of a pre-set window in a dis- - 
play 20, based on a filtering data file 1 81 . a display data 
file 182, picture files 1 83-1 to 1 83-k, or a hysteresis data 
file 184. and commands the contents management pro- 
gram 1 1 1 to execute processing, such as checkin or 
35 checkout, based on the operation on the keyboard 1 8 or 
the mouse 1 9. 

[0107] The filtering data file 181, recorded on the 
HDD 21. stores data used for weighting the contents 
stored in the contents files 161-1 to 161-N recorded in 
40 the contents database 114. 

[0108] The display data file 182. recorded on the 
HDD 21, stores data corresponding to contents stored 
in the contents files 161-1 to 161-N recorded in the con- 
tents database 1 1 4. 
45 [0109] The picture files 183-1 to 183-k, recorded on 
the HDD 21, stores pictures corresponding to the con- 
tents files 161-1 to 161-N recorded in the contents data- 
base 114 or pictures corresponding to a package as 
later explained. 

so [0110] If there is no necessity for differentiating the 
picture files 183-1 to 183-k from one another, these will 
be referred to simply as picture files 1 83. 
[01 1 1 1 The hysteresis data file 1 84. recorded on the 
HDD 21 , stores hysteresis data, such as the number of 
55 times the contents stored in the contents files 161-1 to 
161-N recorded on the contents database 114 have 
been checked in or checked out. and the dates of the 
checkin or checkout. 
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[0112] The display operation command program 
1 12 when performing the registration processing trans- 
mits an ID of the previously stored contents manage- 
ment program 1 1 1 to the EMD registration servers over 
the network 2 and also receives the authentication key 5 
and the EMD selection program 131 from the EMD reg- 
istration server 3 to send the authentication key and the 
EMD selection program 131 to the contents manage- 
ment program 111. 

[0113] The recording program 113 demonstrates a 10 
picture of a pre-set window and reads out data such as 
contents recording time from an optical disc 42 loaded 
on the drive as a CD based on the actuation on the key- 
board 1 8 or the mouse 1 9. 

[0114] The recording program 113 requests the 15 
WWW server 5-1 or 5-2 to transmit data corresponding 
to the contents recorded on the CD, such as the name 
of the album or th name of an artist, or data correspond- 
ing to the contents recorded on the CD, such as title of 
the musical number, based on e.g., the recording time 20 
of the contents recorded on the CD, while receiving data 
corresponding to the CD or data corresponding to the 
contents recorded on the CD, from the WWW server 5- 
1 or 5-2. 

[0115] The recording program 113 sends the data 25 
corresponding to the received CD or data correspond- 
ing to the contents recorded on the CD to the display 
operation command program 1 1 2. 
[01 1 6] When fed with a command for recorcling, the 
recording program 113 reads out the contents from the 30 
CD as an optical disc 42 loaded on the drive 22 to out- 
put the read-out contents to the contents management 
program 111. 

[0117] The contents database 114 stores the con- 
tents, supplied from the contents management program 35 
111, in the state in which the contents are compressed 
and encrypted in pre-set compression arltJ encryption 
systems, in one of the contents files 1 61 -1 to 161-N, by 
way of recording the contents on the HDD 21. The con- 
tents database 114 stores the usage rule data, corre- 40 
spending to the contents stored in the contents files 

161- 1 to 161-N, in one of the usage rule files 162-1 to 

1 62- N associated with the contents files 1 61 -1 to 1 61 -N, 
having the contents stored therein, respectively, by way 

of recording on the HDD 21 . 45 
[0118] It is possible for the contents database 1 14 
to record the contents files 161-1 to 1 61-N or the usage 
rule files 162-1 to 162-N as records. 
[0119] For example, the usage rule data corre- 
sponding to the contents stored in the contents file 161- so 
1 is stored in the usage rule file 162-1. The usage rule 
data corresponding to the contents stored in the con- 
tents file 161-N is stored in the usage rule file 162-N. 
[0120] The data recorded in the usage rule files 
1 62-1 to 1 62-N corresponds to the data recorded on a 55 
terminal database or to data recorded on a musical 
number database. That is, the contents database 1 14 is 
constructed to encompass the terminal database and 



the musical number database, which will be explained 

subsequently. 

[01 21 ] In the following, if there is no necessity of dif- 
ferentiating the contents files 161-1 to 161-N from one 
another, these will simply be referred to as a contents 
file 161. Similarly, if there is no necessity of differentiat- 
ing the usage rule files 162-1 to 162-N from one 
another, these will simply be referred to as a usage rule 
file 162. 

[0122] The application for purchase 1 15 is supplied 
from the EMD registration server 3 through the network 
2 or supplied as it is recorded on a pre-set CD. The 
application for purchase 115 requests the EMD server 
4-1 to transmit pre-set contents though the network, 
while receiving the contents from the EMD server 4-1 to 
send the received contents to the contents manage- 
ment program 111. When receiving the contents from 
the EMD server 4-1, the application for purchase 115 
executes billing processing. 

[0123] The correlation of data stored in a display 
data file 82 and the contents files 1 61 -1 to 1 61 -N stored 
in the contents database is hereinafter explained. 
[0124] The contents stored in one of the contents 
files 161-1 to 161-N belong to a pre-set package. More 
specifically, the package is one of the original package, 
mt select package and the filtering package. 
[0125] The original package, to which one or more 
contents belong, is associated with the classification of 
contents in the EMD servers 4-1 to 4-3, such as a so- 
called album, or with a sole CD. The contents belong to 
some original package and cannot belong to plural orig- 
inal packages. The original package, to which the con- 
tents belong, cannot be cnanged. The user is able to 
edit part of the informatiort associated with the original 
package (that is, add the information or change the 
added information). 

[0126] To a my-select package belong one or more 
contents optionally selected by the user. The ser is able 
to optionally select which contents belong to the my- 
select package. The contents can belong to one or 
more my-select packages simultaneously. On the other 
hand, it is unnecessary for the contents to belong to 
some my-select package. 

[01 27] To the filtering package belong the contents 
selected based on the filtering data stored in the filtering 
data file 181. The filtering data is furnished from the 
EMD servers 4-1 to 4-3 or the WWW server 5-1 or 5-2 
through the network 2. or is furnished as the data is 
recorded on a pre-set CD. The user is also able to edit 
the filtering data stored in the filtering data file 181. 
[0128] The filtering data serves as a reference for 
calculating pre-set contents or calculating the weight for 
the contents. For example, if the filtering data corre- 
sponding to the best ten of J-POP (Japanese Pops) for 
the current week is used, the personal computer 1 is 
able to specify the contents of the rank 1 up to the rank 
1 0 of the Japanese pops for the current week. 
[0129] In the filtering data file 181. there are, for 
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example, filtering data for selecting the contents in the 
order of the diminishing checkout period for the past one 
month, filtering data for selecting the contents with the 
larger number of times of checkout during the past half- 
year period and filtering data for selecting contents 
including the word -love" in the name of the musical 
number. 

[0130] In this manner, the contents of the filtering 
package are selected by associating the filtering data 
with contents displaying data 221 corresponding to con- 
tents (including data set by the user in the contents dis- 
playing data 221 ) or with a hysteresis data 1 84. 
[0131] Fig.6 illustrates a window which the record- 
ing program 113 demonstrates on the display 20 when 
the CD infomiation is received from the WWW server 5- 
2. Based on the CD information received from the 
WWW server 5-2, the recording program 113 demon- 
strates the CD title, such as "asynchronized", on a field 
201. Based on the CD information received from the 
WWW server 5-2. the recording program 113 demon- 
strates the name of an artist, such as "Quai", on a field 
202. 

[0132] Based on the CD information received from 
the WWW server 5-2. the recording program 1 1 3 dem- 
onstrates the name of a musical number, such as 
"heat", "planet", "black" or "soul" on the number name 
demonstrating portion of a field 203. Similarly, the 
recording program 113 demonstrates the name of the 
artist, such as "Quai". in the artist name demonstrating 
portion of the field 203. 

[0133] After reception of the pre-set CD information 
by the recording program 113. the latter stores the CD 
information in a pre-set directory of the HDD 21 . 
[0134] When e.g., a button 204 is clicked to issue a 
command for acquiring the CD information, the record- 
ing program 1 13 first retrieves a pre-set directory of the 
HDD 21 . If the CD information is stored in the directory, 
the recording program 1 13 demonstrates a dialog box, 
not shown, to cause the user to select whether or not 
the CD information stored in the directory is to be used. 
[0135] If a button 206 for commanding the start of 
recording of contents arranged in a window displayed 
by the recording program 113. the recording program 
1 13 reads out the contents from the CD stored in the 
drive 22 to send the contents read out from the CD 
along with the CD information to the contents manage- 
ment program 111. The transcodec program 1 34 of the 
contents management program 111 compresses the 
contents supplied from the recording program 113 in 
accordance with a pre-set compression system. The 
encryption program 1 35 encrypts the compressed con- 
tents. The usage rule conversion program 136 gener- 
ates the usage rule data corresponding to the encrypted 
contents. 

[0136] The contents management program 111 
sends the compressed and encrypted contents along 
with the usage rule data to the contents database 114. 
[0137] The contents database 114 generates a 



contents file 161 and a usage rule file 162, correspond- 
ing to the contents received from the contents manage- 
ment program 111. and stores the contents and the 
usage rule data in the contents file 161 and in the usage 
5 rule file 162. 

[0138] When the contents and data of the usage 
rules corresponding to the contents are stored in the 
contents database 1 14. the contents management pro- 
gram 1 1 1 sends the CD information and the usage rule 

10 data received from the recording program 113 to the 
display operation command program 1 12. 
[0139] The display operation command program 
112 generates original package displaying data 201 and 
contents displaying data 221 . based on the CD infonna- 

15 tion and the usage rule data corresponding to the con- 
tents stored in the contents database 114 in the 
recording processing. 

[0140] In the window displayed by the recording 
program 1 1 3. there is arranged a button 205 adapted for 
20 automatically setting whether or not the contents read 
out from the CD are to be checked out in one of the port- 
able devices 6-1 to 6-3 read out from the CD. when the 
contents read out from the CD are recorded on the con- 
tents database 1 1 4. 
25 [01 41 ] For example, if the button 205 is clicked, the - 
recording program 113 demonstrates a pulldown menu 
showing a list of the portable devices 6-1 to 6-3. When 
the user has selected one of the portable devices 6-1 to * 
6-3 from its pulldown menu, the personal computer 1 
30 automatically checks in or checks out the contents 
recorded from the CD in of from the selected portable 
devices 6-1 to 6-3. If the user has selected the "no 
checkout" from the pull-down menu, the personal com- 
puter per 1 forms no checkout when contents are 
35 recorded from the CD. 

[0142] Referring to the flowchart of Fig.7. the 
processing of transmitting the music data reproduced 
from the CD loaded on the drive 22 to the HDD 21 to 
copy the data, by the CPU 11 executing the recording 
40 program 113. is hereinafter explained. When the user 
actuates the keyboard 18 or the mouse 19 to input to 
the CPU 1 1 a command of transmitting the music data 
reproduced from the CD, not shown, loaded on the drive 
22, to the HDD 21 for copying, over the interface 1 7, the 
45 CPU 11 at step S11 causes the GUI {Graphical User 
Interface) for selecting the number to be copied on the • 
display 20 through the interface 1 7. 
[0143] Specifically, the CPU 11 reads-in the TOC 
(Table-of-Contents) of the CD loaded on the drive 22 to 
50 acquire the information on the musical number con-- 
tained in the CD to demonstrate the information on the 
display 20. Alternatively, the CPU 1 1 reads out the ISRC 
(International Standard Recording Code) for each musi- 
cal number contained in the CD to acquire the informa- 
55 tion on the musical number to demonstrate the 
infomriation on the display 20. Still alternatively, the CPU 
1 1 accesses the WWW server 5-1 or 5-2 over the net- 
work 2 to acquire the information of the musical number 
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of the CD to demonstrate the corresponding GUI on the 
display 20. The user uses the GUI of the display 20 to 
actuate the keyboard 18 or the key 19 to select the 
nunnber to be copied. 

[0144] At the next step Si 2. the CPU 1 1 checks the 5 
terminal database stored In the HDD 21. This terminal 
database corresponds to the usage rule files 162-1 to 
162-N of the contents database 114 shown in Fig. 5. 
The processing for checking this termirial database Is 
shown in detail In the flowchart of Fig. 8. io 
[0145] At step S31 , the CPU 1 1 cooperates with the 
CPU 32 of the adapter 26 to compute hash values of the 
entire terminal database. At step S32. the CPU 1 1 com- 
pares the calculated values to the previously stored 
hash value. rs 
[0146] Meanwhile, if no data is recorded in the ter- 
minal database, the CPU 1 1 computes no hash values. 
[0147] That is, there is formed a temninal database 
In the HDD 21. In this temninal database, the ISRC of 
previously recorded music numbers and the date and 20 
time of the copying are recorded in association with 
each other as the information for supervising the music 
data recorded on the HDD 21. as shown in Fig.9. The 
hash values of the entire terminal database, based on 
the respective ISRCs and the date and time of copying 25 
of the entire numbers recorded in the terminal database 
are computed at step S38 by the CPU 32 of the adapter 
26 at step S38 and are recorded in the non-volatile 
memory 34. The hash values are obtained by applying 
a hash function to the data. The hash function in general 30 
Is a unidirectional function for mapping data of variable 
lengths to values of short fixed length and has proper- 
ties that collision between hash values is not likely to 
take place. Examples of the hash functions are SHA 
(Secure Hash Algorithm) and MD (Message Digest) 5. 35 
The CPU 1 1 at step S31 computes hash values in the 
same way as the CPU 32. The CPU 11 at step S32 
requests the CPU 32 to read out the hash values stored 
In the non-volatile memory 34 to compare at step S31 
the transferred hash values with the hash values the 40 
CPU 1 1 has just calculated. 

[0148] At step 833. the CPU 1 1 verifies whether or 
not the hash values just calculated at step S31 coincide 
with the last hash values of the terminal database 
stored in the non-volatile memory 34. If the hash values 45 
are not coincident, the CPU 1.1 verifies that the terminal 
database has been altered with malignant intention. 
Thus, the CPU 1 1 at step S34 generates a message 
reading: "since the terminal database has been altered, 
copying Is not possible" to output the message via the so 
interface 17 to the display 20 for display thereon. The 
CPU 1 1 then terminates the processing. That is, in this 
case, the processing of reproducing music data 
recorded on the CD for copying on the HDD 21 Is pro- 
hibited. 55 
[0149] If the hash value computed at step 831 coin- 
cides with the previous hash value, the program moves 
to step 835, where the CPU 1 1 acquires the ISRC of the 



number selected as number for copying specified at 
step 811 (selected music number), from the CD. If no 
ISRC is recorded on the CD, the CPU 1 1 reads out the 
TOC data of the CD and applies the hash function to the 
data to acquire data of a suitable length, such as 58 bits, 
to use the data in place of the ISRC. 
[0150] At step 836, the CPU 1 1 verifies whether or 
not the ISRC acquired at step S35 (that is the selected 
music number) has been registered in the terminal data- 
base (Fig.9), If the ISRC is not registered in the terminal 
database, the music number is not recorded as yet in 
the HDD 21. Thus, the program moves to step S37, 
where the CPU 11 registers the ISRC of the music 
number and the current time and date In the terminal 
database. Meanwhile, the CPU 1 1 exploits the output 
value of the RTC 35 of the adapter 26 transferred from 
the CPU 32. At step 838, the CPU 1 1 reads out data of 
the terminal database at the time point to transfer the 
read-out data to the CPU 32 of the adapter 26. The CPU 
32 calculates the hash value of the transfer data to store 
the calculated hash value in the non-volatile memory 
34. This hash value, thus stored, is compared at step 
832 to the previously stored hash value. 
[0151] Then, at step 839. the CPU 11 sets an 
unregistered flag specifying that the selected number 
has not been registered in the terminal database. This 
flag is used at the step 813 of Fig.7, as later explained, 
to check whether or not the selected music number has 
been registered In the terminal database. 
[0152] If. at step 836, the ISRC of the selected 
music number is verified to be registered In the terminal 
database, the selected music number is the music 
number registered at least once in the HDD 21 . Thus, in 
this case, the program moves to step 840 where the 
CPU 11 checks whether or not the current date and time 
(current date and time outputted by the RTC 35 of the 
adapter 26) is not less than 48 hours ahead the date 
and time of registration of the selected music number 
registered in the terminal database. If the current time Is 
ahead the date and time of registration by not less than 
48 hours, the music number has been registered at 
least once on the HDD 21. However, since the time of 
48 hours or more elapsed since the music number was 
registered, there is no particular harm if the music 
number is copied again. Thus, in this case, the copying 
on the HDD 21 is allowed. Therefore, the program 
moves to step 841 where the CPU 1 1 changes the date 
and time of the terminal database from the past date 
and time of registration to the current date and time 
(date and time outputted by the RTC 35). The program 
then reverts to step 838 where the CPU 1 1 causes the 
CPU 32 to compute the hash value of the entire terminal 
database for storage in the non-volatile memory 34. The 
CPU 1 1 at step S39 sets an "unregistered" flag for the 
music number. 

[0153] On the other hand, if it is found at step 840 
that the current time is not ahead by not less than 48 
hours as from the date and time of registration, the cop- 
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ying of the selected music number on the HDD 21 is 
prohibited. In this case, the program moves to step S42 
where the CPU 1 1 sets the "registered" flag for the 
selected music number 

[0154] In this manner, there is set by the terminal 
database check processing indicating whether or not a 
flag Indicating that the selected music number has been 
registered in the HDD 21 . 

[0155] Reverting to Fig. 7, at step SI 3 the CPU 1 1 
verifies, from the above-mentioned flag, whether or not 
the selected music number has already been registered 
in the terminal database. If the selected music number 
has been registered, the program moves to step SI 4, 
where the CPU 1 1 causes the display 20 to demon- 
strate a message reading: " The time not less than 48 
hours has not elapsed since this music number was 
copied once and so the music number cannot be cop- 
ied". This allows the user to comprehend the reason 
why the music number may not be copied on the HDD 
21. 

[0156] If. at step 813. the selected music number 
has been verified not to be registered in the terminal 
database, the program moves to step SI 5. where the 
CPU 1 1 controls the drive 22 to read out the music data 
from the CD loaded therein. In this music data, a water- 
mark code is inserted at a pre-set position, as shown in 
Fig.10. At step 816. the CPU 1 1 extracts the watermark 
code contained in the music data to verify at step 817 
whether or not the watermark code indicates copying 
inhibition. If the watermark code indicates copying inhi- 
bition, the program moves to step Si 8 where the CPU 
1 1 causes a message reading: "copying in inhibited" to 
be demonstrated on the display 20 via the interface 17 
to terminate the copying processing. 
[0157] If conversely it has been found at step 817 
that the watermark is not Indicating copying inhibition, 
the program moves to step 81 9 where the CPU 1 1 com- 
presses music data by software processing in accord- 
ance with, for example. ATRAC (Adaptive Transform 
Acoustic Coding, registered trademark) system. At step 
S20, the CPU 1 1 encrypts the music data, using the 
pre-set cryptographic key stored in the memory 13. in 
accordance with the encrypting methods, such as data 
encryption standard system (DES)or the fast encipher- 
ment algorithm (FEAL) system. The cryptographic key 
may also be a random number generated by software or 
a random number generated by the CPU 32 of the 
adapter 26. By performing the encryption processing 
not only by the personal computer 1 alone but also by 
cooperation between the personal computer 1 and the 
CPU 32 of the adapter 26 in executing the encryption 
processing, it is possible to realize encryption which 
renders deciphering more difficult. 
[0158] Then, at step S21, the CPU 11 causes the 
encrypted data to be transferred to the HDD 21 to store 
the encrypted data as a file along with a filename. Alter- 
natively, the position information of the filename, such 
as is given by the number of bytes from the leading end, 



may be accorded as a part of the file for storage. 
[0159] This storage processing may be perfomied 
independently of or simultaneously with the above-men- 
tioned encoding and encryption processing. 
5 [0160] At step S22, the CPU 11 uses the storage 
key memorized in the pre-set RAM 13 to cipher the 
encryption key obtained on encrypting the music data, 
in accordance with the aforementioned DBS or FEAL 
system, to store the encryption key In the music number 
10 database of the HDD 21 . It is noted that the storage key 
is stored in such a manner as to render reading difficult 
if the readout method used is illicit, and that the music 
number database of the HDD 21 corresponds to the 
usage rule files 162-1 to 162-N of the contents data- 
15 base 1 14 shown In Fig.5. 

[01 61 ] At step S23, the CPU 1 1 groups together the 
information on the stored files, encrypted encryption 
key, information on the music number and the informa- 
tion on the name of the music number, inputted by the 
20 user, as a set, and registers the set in a music number 
database of the HDD 21. At step S24. the CPU 11 
causes the CPU 32 to compute the hash value of the 
entire music number database for storage in the non- 
volatile memory 34. 
25 [0162] In this manner, the music number database, ' 
shown for example in Rg.1 1, is reg:stered on the HDD 
21 . In the present case, there are recorded filenames of 
the items 1 to 3. encrypted encryption key. name of the" 
music number, duration of the music number, playback 
30 conditions (date and time of start and end and limitation 
on the number of times), a number of times of playback 
counter, playback time billing condition, copying condi- 
tions (number of times), a number o- times of copying 
counter and copying conditions (SCIVA'S). 
35 [0163] Since re-duplication becomes possible after 
a pre-set time lapse as from the time of duplication, a 
plural number of times of duplication, allowed for a user 
as a private person, becomes possible. If conversely a 
large number of duplication is to be attempted, the oper- 
40 ation is extremely time-consuming and becomes practi- 
cally impossible. For example, if the personal computer 
1 is in trouble, such that the contents recorded on the 
HDD 21 have been erased, it is possible to re-duplicate 
the erased contents after lapse of a pre-set time to 
45 record the contents on the HDD 21 . 

[0164] The contents of the terminal database, - 
recorded on the HDD 21, can be coowned through the 
network 2. 

[0165] In the foregoing description, the date and • 
50 time of duplication has been stored in association with • 
the ISRC. Alternatively, the other information identifying 
the contents or the CD, such as the title of the musical 
number, an album name etc may also be used. 
[0166] Referring to the flowchart of Rgs.12A to 
55 12C, the processing of moving music data from the 
HDD 21 to the flash memory 61 of the portable device 
6, such as the memory stick (trademark), by the CPU 1 1 
executing the contents management program 1 1 1 and 
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by the CPU 53 executing the main program, is 
explained. At step S51 . the CPU 1 1 computes the hash 
values of the entire music number database. At step 
S52, the CPU 1 1 compares the computed hash value to 
the hash value computed under control by the CPU 32 
and stored In the non-volatile memory 34. In case of 
non-coincidence between the two hash values, the CPU 
1 1 advances to step S53 to cause a message: "it is 
feared that the music number database has ben altered 
with malignant intention" to be demonstrated on the dis- 
play 20 to terminate the processing. The processing in 
this case is similar to that from steps S31 to S34 of 
Fig. 8. In this case, the music data is not moved from the 
HOD 21 to the portable device 6. 

[0167] Then, at step S54, the CPU 11 causes the 
information on the music number registered in the 
music number database formed in the HDD 21 for dem- 
onstration on the display 20 as the GUI for selection. 
Based on this GUI for selection, the user selects the 
music numberto be moved from the HDD 21 to the port- 
able device 6 by actuating the keyboard 18 or the 
mouse 19. Then, at step S55. the CPU 1 1 checks the 
playback conditions, copying conditions or the playback 
time billing conditions of the music number selected at 
step S54. This processing will be explained in detail with 
reference to the flowchart of Fig. 13. 
[0168] Then, at step S56, authentication processing 
is earned out reciprocally between the CPU 1 1 of the 
personal computer 1 and the CPU 53 of the portable 
device 6. whereby the session key is co-owned. 
[0169] It is assumed that a master key KM is pre- 
stored in the non-volatile memory 61 of the portable 
device 6 or in the EEPROM 68. and that a personal key 
KP and the ID are pre-stored in the RAM 13 of the per- 
sonal computer 1 orin apre-setfile of the HDD 21. CPU 
53 is fed from the CPU 1 1 with the ID pre-stored in the 
RAM 13 and generates a key which is the-same as the 
personal key of the personal computer 1 stored in the 
RAM 13 by applying the hash function to the ID and its 
own master key KM. By so doing, the common personal 
key is co-owned by the personal computer 1 and the 
portable device 6. Using this personal key* it is possible 
to generate a transient session key. 
[0170] Alternatively, the ID and the master key KMP 
are pre-stored in the RAM 13 of the personal computer 
1 , at the same time as the ID and the master key KMM 
of the portable device 6 are stored in the flash memory 
61 of the portable device 6. The respective IDs and 
master keys are reciprocally transmitted so that one of 
the personal computer 1 and the portable device 6 
applies the hash function to the ID and the master key 
transmitted from the other to generate its personal key. 
From this personal key, a transient session key is gener- 
ated further. 

[0171] Meanwhile, the lOS (International Organiza- 
tion for Standardization) 9798-2, for example, may be 
utilized as the authentication method. 
[0172] If the reciprocal authentication has not been 



performed correctly, the processing comes to a close. If 
the reciprocal authentication has been performed cor- 
rectly, at step S57, the CPU 1 1 reads out the filename of 
the selected number from the music number database. 
5 while reading out music data of the filename, such as 
musical data encrypted by the processing of step S20 of 
Fig.2. from the HDD 21. At step S58, the CPU 1 1 exe- 
cutes the processing of converting the compression 
encoding system of digital music data read out at step 
10 S57 (processing of step SI 9), encrypting system 
(processing of step S20) and the format into those of the 
portable device 6. This converting processing will be 
explained subsequently in detail with reference to the 
flowchart of Fig. 1 5. 
15 [01 73] At step 859. the CPU 1 1 encrypts the music 
data, converted at step 858, with the session key co- 
owned by the reciprocal authentication processing of 
step 856. to transfer the encrypted music data to the 
portable device 6 over the USB port 23. At step S60, on 
20 reception of the music data transmitted over the USB 
connector 6, the CPU 53 of the portable device 6 
causes the music data to be directly stored in the non- 
volatile memory 61. 

[0174] At step 861, the CPU 1 1 converts the play- 
25 back conditions (date and time of playback start and 
end. limitation on the number of times of playback etc) 
of the selected music number, registered in the music 
number database, into the fomn supervised by the port- 
able device 6. At step 862. the CPU 1 1 converts the 
30 SCM8 information in the copying condition registered in 
the music number database of the selected music 
number into the form supervised by the portable device 
6. At step 863, the CPU 1 1 transfers the playback con- 
dition converted at step 861 and the SCMS information 
35 converted at step 862 to the portable device 6. The 
CPU 53 of the portable device 6 stores the transferred 
playback condition and the SCMS information in the 
flash memory 61. 

[0175] At step S64, the CPU 1 1 transfers the play- 
40 back condition, playback time charging conditions or the 
copying conditions, registered in the music number 
database of the selected music number, in the form in 
which the CPU 1 1 handles these conditions in the music 
number database, for storage in the flash memory 61 . 
45 [0176] At step S65. the CPU 11 reads out the 
encrypted key of the selected music number, from the 
music number database. At step 866, the CPU 11 
decodes the encryption key with the storage key stored 
in the RAM 1 3 and encrypts the decoded storage key 
50 using the session key The CPU 11 transfers the 
encryption key, encrypted with the session key to the 
portable device 6. 

[0177] The CPU 53 of the portable device 6 at step 
867 decodes the encryption key, transfen-ed from the 
55 personal computer 1 , using the session key co-owned in 
the reciprocal authentication processing, and encrypts 
the decoded encryption key using its own key The CPU 
1 1 causes the encrypted encryption key to be stored in 
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the flash memory 61 In association with the already 
stored data. 

[0178] On termination of the storage of the encryp- 
tion key, the authentication device 22 at step S68 
advises the personal computer 1 that the encryption key 
has now been stored. On reception of this notice from 
the portable device 6, the CPU 1 1 of the personal com- 
puter 1 at step S69 deletes the file of the music data 
from the HDD 21 . while also deleting the set of the ele- 
ments of the music number from the music number 
database. This realizes movement Instead of copying. 
At step S70. the CPU 1 1 transfers the data of the music 
number database to the CPU 32 of the adapter 26 to 
cause the CPU 32 to compute the hash value of the 
entire database for storage in the flash memory 61 . This 
hash value is used at the aforementioned step S52 as 
the previously stored hash value. 

[0179] The check processing of checking the play- 
back condition of the selected music number at step 
S55 of Fig.12A. by the CPU executing the contents 
management program 111 is explained. At step S81. 
the CPU 1 1 causes various conditions to be read out 
from the music number database. The CPU 1 1 at step 
S82 verifies whether or not the number of times of cop- 
ying, among the conditions read out at step S81 , has 
already exceeded the limit number of times of copying. 
If the number of times of copying has already exceeded 
the limit number of times of copying, the copying is no 
longer allowed. So, the CPU 1 1 advances to step S83 
where the CPU 1 1 causes a message reading: "the 
number of times of copying has already exceeded the 
limit value", for example, to be demonstrated on the dis- 
play 20 to terminate the processing. If it is verified at 
. step S82 that the number of times of copying has not 
exceeded the limit number of times of copying, the pro- 
gram moves to step S84 to check whether or not the 
cun-ent date and time is past the playback end date and 
time. The current date and time may be that outputted 
by the RTC 35 of the adapter 26. This prohibits the cur- 
rent date and time of the personal computer 1 from 40 
being intentionally corrected by the user to past values. 
The CPU 11 is fed from the CPU 32 with this current 
date and time to give the decision of step S84 on its 
own. The CPU 1 1 may also route at step S81 the play- 
back condition read out from the music number data- 4S 
base to the CPU 32 of the adapter 26 to cause the CPU 
32 to execute the decision processing of step S84. 
[0180] If the current date. and time is past the play- 
back end date and time, the program moves to step 
S85. where the CPU 11 erases the selected music so 
number from the HDD 21 . at the same time as it erases 
the information on the selected music number from the 
music number database. At step S86. the CPU 11 
causes the CPU 32 to calculate the hash value of the 
music number database to store the calculated value in ss 
the nonvolatile memory 34. The processing then comes 
to a close. Thus, In this case, the music data is not 
moved. 



[0181] If it is verified at step S84 that the current 
date and time is not past the playback end date and 
time, the program moves to step S87 where the CPU 1 1 
verifies whether or not the playback time billing condi- 
5 tions for the selected music number (such as, for exam- 
ple, the fee per each reproduction), is registered in the 
music number database. If the playback time billing con- 
ditions are registered, the CPU 11 at step S88 commu- 
nicates with the portable device 6 to check whether or 
10 not the portable device 6 has the billing function. If the 
portable device 6 does not have the billing function, the 
selected music number cannot be transmitted to the 
portable device 6. Thus, the CPU 1 1 at step S89 causes 
a message reading: "the destination of transfer does not 
15 have the billing function" to be demonstrated on the dis- 
play 20 to tenninate the moving processing for music 
data. 

[0182] If It has been found at step S87 that the play- 
back time billing function is not registered, or if it has 
20 been found at step S88 that the portable device 6 has 
the billing function, the program moves to step S90, 
where the CPU 11 verifies whether or not the other play- 
back functions, such as the limit number of times of 
reproduction, has been registered for the selected 
25 music number. If the other playback conditions are reg- 
istered, the program moves to step S91 where the 
CPU1 1 checks whether or not the portable device 6 has 
the function of observing these playback functions. If • 
the portable device 6 does not have the function of 
30 observing these playback functions, the program moves 
to step S92 where the CPU 1 1 demonstrates a mes- 
sage reading: "the device of the destination of transfer 
does not have the function of observing the playback 
conditions' on the display 20 to tenninate the process- 
as ing. 

[0183] If it is verified at step S90 that the playback 
conditions are not registered, or it is verified at step S91 
that the portable device 6 lacks in the function of 
observing the playback conditions, the processing of 
checking the playback conditions etc is terminated to 
revert to the step S56 of Fig.12A. 

[0184] Fig. 14 shows an example of the playback 
conditions supervised by the portable device 6, that is 
the playback conditions that can be observed by the 
portable device 6. In the present example, the playback 
start date and time and playback end date and time are- 
registered for each number of the items 1 to 3, however, 
the number of times of playback is registered only for. 
the item 2, while It is not registered for the items 1 nor 3.> 
Thus, if the music number of the item 2 is selected, the^ 
playback conditions for the number of times of playback 
can be observed, however, if the music number of the 
item 1 or 3 is selected, the playback conditions for the 
number of times of playback cannot be observed. 
[0185] Referring to the flowchart of Fig. 15, the for- 
mat conversion processing at step S58 of Fig.12A, by 
the CPU 11 executing the contents management pro- 
gram 1 1 1 . is explained in detail. At step SI 01 . the CPU 
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11 checks the format of the selected music number 
recorded on the HDD 21 (playback conditions, usage 
rules or copying conditions). At step Si 02, the CPU 1 1 
checks the condition that can be set on the counterpart 
equipment, here the portable device 6. That Is. the CPU 5 
1 1 inquires into the conditions that can be set on the 
CPU 53 of the portable device 6 and acquires a 
response. The CPU 11 at step Si 03 gives a decision 
based on the format condition registered in the music 
number database, and which can be set on the counter- 10 
part equipment, as checked at step Si 02. 
[0186] At step SI 04, the CPU 1 1 decides whether 
or not there is any condition that can be set. If there is 
no condition that can be set, the program moves to step 

8105 where the CPU 1 1 inhibits the processing of mov- 15 
ing the music data to the portable device 6. That is, 
since the portable device 6 cannot observe the condi- 
tion registered in the music number database, the port- 
able devfce 6 is prohibited from moving the music data. 
[0187] If it Is verified that there is a condition that 20 
can be set at step S104. the CPU 1 1 advances to step 

8106 where the CPU 1 1 converts the condition to that of 
the functional format condition of the counterpart 
device. At step SI 07. the CPU 11 sets the converted 
conditions on the counterpart equipment. As a result. 25 
the portable device 6 is able to reproduce the music 
data in accordance with the so-set conditions, that Is 
under observing the so-set conditions. 

[0188] Refen-ing to the flowchart of Rgs.lSA to 
16C. the processing of copying music data from the 30 
HDD 21 to the portable device 6, by the CPU 1 1 execut- 
ing the contents management program 1 1 1 and by the 
CPU 53 executing the main program, is explained. The 
processing from step S1 1 1 to step S127 of Rgs.1 6A to 
1 6C is similar to the processing of step S51 to step S67 35 
of moving music data from the HDD 21 to the portable 
device 6 of Figs.12A to 12C. That is, in this case, the 
music number database is checked as to possible falsi- 
fication, after which the reproduction condition of the 
selected music number is checked. The reciprocal 40 
authentication processing between the portable device 
6 and the personal computer 1 then is carried out, after 
which musical data is transferred from the HDD 21 of 
the personal computer 1 to the flash memory 61 of the 
portable device 6 for storage therein. Then, at step 45 
S128, the CPU 11 of the personal computer 1 incre- 
ments the number of times of copying counter of the 
music number database by 1 . At step SI 29. the CPU 1 1 
causes the hash values of the entire music number 
database to be calculated and stored in the non-volatile so 
memory 34. 

[0189] Referring to the flowchart of Fig. 17. the 
processing of moving music data from the portable 
device 6 to the HDD 21 is explained. At step S161, the 
CPU 1 1 of the personal computer 1 requests the CPU 55 
53 of the portable device 6 to read out the information of 
the music number stored in the flash memory 61. The 
CPU 53 is responsive to this request to transmit the 



information on the music number stored In the flash 
memory 61 to the personal computer 1. Based on this 
information, the CPU 11 causes the display 20 to dem- 
onstrate the GUI for selecting the music number stored 
in the flash memory 61 . The user actuates the keyboard 
18 or the mouse 19 to specify the music number to be 
moved from the portable device 6 to the HDD 21 , based 
on the GUI. 

[0190] At step S162, the CPU 11 executes the 
reciprocal authentication processing with respect to the 
CPU 53 to co-own the session key. This processing is 
similar to that at step S56 of Fig.12A. 
[0191] Then, at step SI 63, the CPU 53 reads out 
the music data of the selected music number stored 
encrypted in the flash memory 61 to transfer the read- 
out data to the personal computer 1. At step S164, the 
CPU 1 1 of the personal computer 1 accords a filename 
as a file to music data transferred hereto from the port- 
able device 6 to store the file in the HDD 21 . This stor- 
age can be done by according the position information 
of the filename, such as, for example, the number of 
bytes as counted from the leading end, as a part of a 
file. 

[0192] At step SI 65. the CPU 53 reads out the 
encrypted encryption key of the selected music number 
stored in the flash memory 61, decodes the key with its 
own storage key, encrypts the decoded key with the 
session key and transfers it to the personal computer 1 . 
This encryption key has been stored In the flash mem- 
ory 61 by the processing at step S67 of Fig.12C. 
[0193] If the encryption key from the portable 
device 6 is transferred from the portable device 6, the 
CPU 1 1 of the personal computer 1 decodes the k(jy 
with the session key and encrypts It with Its own storage 
key. At step SI 67, the CPU 1 1 registers the filename of 
the music data file stored at step Si 64, the name of the 
music data inputted via GUI by the user or the encryp- 
tion key encrypted at step Si 66 etc on the music 
number database of the HDD 21. At step Si 68, the 
CPU 1 1 causes the CPU 32 to compute the hash values 
of the entire database to store the computed hash val- 
ues in the non-volatile memory 34. 
[0194] At step 8169, the CPU 11 of the personal 
computer 1 advises the portable device 6 of the effect 
that the encryption key has now been stored to make a 
request for deleting the music data of the music number. 
If the musical data of the music number is requested by 
the personal computer 1. the CPU 53 at step S170 
deletes the musical data of the music number stored In 
the flash memory 61 . 

[01 95] The processing for copying the musical data 
from the portable device 6 to the HDD 21 , by the CPU 
1 1 executing the contents management program 1 1 1 
and by the CPU 53 executing the main program. Is 
explained with reference to the flowchart of Fig. 18. The 
processing of steps S181 to S188 shown in Fig.18 is 
similar to the processing of steps Si 61 to S168 in the 
processing of moving musical data from the portable 
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device 6 of Rg.l 7 to the HDD 21. That is. the copying 
processing is basically the same as that for moving 
except that the steps Si 69. SI 70 in Fig. 1 7 are omitted. 
Therefore, the con-esponding description is omitted for 
clarity. 

[0196] Referring to the flowchart of Fig. 19, the 
processing of copying the musical data transferred from 
the EMD server 4 on the HDD 21 by the EMD server 4 
and the CPU 1 1 executing the contents management 
program 111. is explained. If accessing to the EMD 
server 4 is commanded by the user via the keyboard 1 8 
or the mouse 19. the CPU 1 1 at step S201 controls the 
communication unit 25 to permit accessing to the EMD 
server 4 via the network 2. The EMD server 4 Is respon- 
sive to this accessing to transfer the information held by 
it, such as the number or title of the music number or the 
variable information, to the personal computer 1. On 
acquisition of the infomnation via the communication 
unit 25. the CPU 1 1 of the personal computer 1 demon- 
strates the information on the display 20 via the inter- 
face 17. The user exploits the GUI demonstrated on the 
display 20 to specify the music number desired to be 
copied. This specifying information is transferred via the 
network 3 to the EMD server 4. At step S203. the CPU 
11 executes the reciprocal authentication processing 
with the EMD server 4 via the network 2 to co-own the 
session key. 

[0197] The reciprocal authentication processing 
between the personal computer 1 and the EMD server 
4 may be carried out using a public key and a secret key 
prescribed in ISO 9798-3, as an example. In this case, 
the personal computer 1 owns its own secret key and 
the public key of the EMD server 4 from the outset, 
whilst the EMD server 4 has its own secret key. to ena- 
ble the reciprocal authentication processing to be exe- 
cuted. The public key of the personal computer 1 may 
be transferred from the EMD server 5. or the certificate 
previously distributed to the personal computer l may 
be transferred from the personal computer 1 to the EMD 
server 4. In the latter case, the certificate may be certi- 
fied by the EMD server 4 to produce the public key. Also, 
the CPU 1 1 at step S204 executes the billing processing 
with respect to the EMD server 4. The billing processing 
will be explained subsequently by referring to the flow- 
chart of Fig.20. 

[0198] Then, at step S205, the EMD server 4 trans- 
fers the encrypted music data of the music number 
specified at step S202 to the personal computer 1 via 
the network 2. At this rime, the time information is also 
transmitted as necessary. At step S206, the CPU 1 1 i 
accords the filename to the musk: data transferred 
thereto to store the data as a file. At step S207, the EMD 
server 4 encrypts the encryption key of the music 
number, using the session key co-owned with the per- 
sonal computer 1 at step S203, to transfer the £ 
encrypted encryption key to the personal computer 1. 
[0199] At step S208. the CPU 11 decodes the 
encryption key. transferred from the EMD server 4. by 



Itself or in cooperation with the CPU 32 of the adapter 
26, to encrypt the decoded encryption key with its own 
storage key At step S209, the CPU 1 1 groups together 
the filename of the music number, information on the 
5 music number, the infomiation on the input name of the 
music number, and the encrypted encryption key, as a 
set, and registers the set in the music number database 
of the HDD 21. At step S2 10. the CPU 11 causes the 
hash value of the entire music number database to be 
10 computed for storage in the non-volatile memory 34. 
[0200] At Step 3205. the EMD server 4 transmits 
time data, along with the music data, to the personal 
computer 1. This tine data is transfen-ed from the per- 
sonal computer 1 to the adapter 26. On reception of the 
75 time data, transmitted from the personal computer 1, 
the CPU 32 of the adapter 26 at step S21 1 corrects the 
time of the RTC 35. Since the time information of the 
RTC 35 of the adapter 26 is corrected in this manner on 
the basis of the time information obtained from an exter- 
20 nal equipment recognized to be correct as a result of the 
reciprocal authentication, correct time information can 
be kept at all times in the adapter 26. 
[0201] Referring to the flowchart of Fig.20, the 
processing pertinent to the billing at step S204 of 
25 ng.19, by the EMD server 4 and the CPU 1 1 executing 
the contents management program 1 1 1 , is explained in- 
detail. At step S221 . the personal computer 1 reads out* 
the price information of the selected music number.- 
specified at step S201 , to write the read-out information 
30 on a billing log on the HDD 21 . Fig.21 shows an exam- 
ple of such billing log. In this case, the user copies items 
1 to 3 from the EMD server 4 , with the charges for the 
items 1 and 2 being 50 yen and with that of the item 3 
being 60 yen. The hash value of the charging log at this 
35 time point is also computed by the CPU 32 and regis- 
tered in the non-volatile memory 34. 
[0202] Then, at step 8222. the CPU 1 1 of the per- 
sonal computer 1 reads out the billing log written at step 
S221 from the HDD 21 to transfer the read-out charging 
*o log via the Network 2 to the EMD server 4. The EMD 
server 4 at step S223 executes the billing computational 
processing based on the billing log transferred from the 
personal computer 1 , That is. the EMD server 4 adds 
the billing log transferred by the user of the personal 
ts computer 1 to the enclosed database for updating. At 
step S224, the EMD server 4 decides whether or not the 
billing log should be settled at once. If it is decided that 
the settlement be carried out at once, the program 
moves to step S225 where the EMD server 4 transfers . 
fO the name of an article necessary for settlement or 
amount to an arbitration server, not shown. At step 
8226, the arbitration server executes the arbitration 
processing for the user of the personal computer 1. If it 
is decided at step S224 that the settlement not be car- 
's ried out at once, the processing at steps 8225 and S226 
is skipped. That is, this processing is subsequently exe- 
cuted periodically, such as once a month. 
[0203] Referring to the flowchart of Figs.22A and 
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22B, the processing of copying the playback music data 
from a CD player, supplied from an I EC 60958 terminal 
of the audio input/output interface 24, not shown, to the 
HDD 21. by the CPU 11 executing the contents man- 
agement program 1 1 1 . is explained. At step S241 , the s 
user connects the IEC60958 of the CD player to the lEC 
60958 terminal of the audio input/output interface 24 of 
the personal computer 1 . At step S242, the user acts on 
the keyboard 1 8 or the mouse 1 9 to enter the title of the 
music number to be copied from the CD player or the w 
number corresponding to the musical number. At step 
S243, the user actuates a button of the CD player ro 
start the reproduction of the CD player. If the CD player 
and the personal computer 1 are interconnected by a 
line for exchanging control signals, a playback start is 
command is inputted via the keyboard 18 or the mouse 
1 9 of the personal computer 1 to start the reproduction 
of the CD player. 

[0204] At step S244, if the reproduction of a CD is 
started in the CD player, the music data outputted by the 20 
CD player is i ransferred via I EC 60958 terminal 16a to 
the personal computer 1 . At step S245, the CPU 1 1 
reads out SCMS (Serial Copy Management System) 
data from input data at the I EC 60958 terminal 16a In 
this SCMS data, there are contained the information on 25 
copying inhib'tion, copying allowed only once or copying 
free. The CPU 1 1 at step S246 checks whether or not 
the SCMS data represents copying inhibition. If the 
result indicates copying inhibition, the program moves 
to step 8247 where the CPU 1 1 causes the display 20 30 
to demonstrate a message reading: "copying is inhib- 
ited" to terminate the processing for copying. That is, in 
such case, the copying on the HDD 21 is inhibited. 
[0205] If the CPU 1 1 verifies at step S246 that the 
SCMS information read out at step S245 is not indicat- 35 
ing copying inhibition, it advances to step S248 to read 
out the watermark code to check at step 8249 whether 
or not the watermark code indicates the copying inhibi- 
tion. If the watermark code indicates copying inhibition, 
the program moves to step 8247 where a pre-set mes- 40 
sage is displayed as above to terminate the copying 
processing. 

[0206] If it is verified at step S249 that the water- 
mark code is not indicating copying inhibition, the pro- 
gram moves to step S250 to carry out terminal database 45 
check. If, as a result of the terminal database check, the 
selected music number has already been registered, 
the processing is terminated by the steps 8251 and 
8252. This processing is similar to that of steps 81 3 and 
814ofFig.7. 50 
[0207] If the selected music number has not been 
registered on the HDD 21 . the registration processing is 
executed at steps 8253 to 8258. Since the processing 
of steps 8253 to S258 is similar to that from steps 81 9 
to 824 of Fig.7, except that the SCMS information sup- 55 
plied from the IEC60958 terminal at step 8257 is also 
registered in the music number database, the process- 
ing is not explained herein specifically. 



[0208] Referring to the flowchart of Figs.23A and 
23B, the processing of reproducing music data from the 
HDD 21 to the lEC 60958 temninal, by the CPU 1 1 exe- 
cuting the contents management program 111, is 
explained. At steps 8271 to 8273, as at steps 81 11 to 
8113 of Fig.i6A, the hash values of the entire music 
number database are computed to verity whether or not 
these hash values coincide with those stored last time, 
by way of performing the check as to whether or not the 
music number database has been altered with malig- 
nant intention. If it is verified that the music number 
database has not been altered, the program moves to 
step 8274 where the CPU 11 accesses the music 
number database of the HDD 21 to read out the infor- 
mation of the music number registered therein to dem- 
onstrate the read-out information on the display 20. The 
user, viewing the display, acts on the keyboard 1 8 or the 
mouse 1 9 to select the music number to be reproduced. 
At step 8275. the CPU 11 executes the check of the 
playback condition etc of the selected music number. 
The processing for checking the playback condition etc 
will be explained in detail by refering to the flowchart of 
Fig.24. 

[0209] Then, at step 8276. the CPU 1 1 reads out 

the encryption key of the music number selected at step 
8274 to decode the read-out encryption key with the 
storage key. At step S277, the CPU 11 reads out the 
SCMS information of the selected music number from 
the music number database to decide the SCMS infor- 
mation outputted at the IEC60958 terminal in accord- 
ance with the rule of the SCMS system. For example, if 
limitations are placed on the number of times of repro- 
duction, the number of times of reproduction is incre- 
mented by 1 to provide the new SCMS information. At 
step 8278. the CPU 1 1 further reads out the ISRC of the 
selected music number from the music number data- 
base. 

[0210] Then, at step S279. the CPU 11 reads out 
the filename of the selected music number from the 
music number database to read out the music data from 
the HDD 21 based on the read-out filename. The CPU 
1 1 further reads out the encryption key corresponding 
to the music data from the music number database to 
decode the read-out key with a storage key. The CPU 
1 1 then decodes the encrypted music data, using the 
decoded encryption key. The CPU 11 at step 8280 out- 
puts the digital music data, decoded at step S279 along 
with the SCMS information decided at step 8277 and 
the IRSC information read out at step 8278, at the I EC 
60958 terminal 16a, in accordance with the prescrip- 
tions of lEC 60958. The CPU 11 also analogizes the 
digital music data to output the analog music data at an 
analog output terminal of the audio input/output inter- 
face 24. 

[0211] At step 8281, the CPU 11 increments the 
value of the number of times of playback counter in the 
music number database by 1. At step 8282, it is 
checked whether or not the playback time charging con- 
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dition has been added in the selected music number. If 
the playback time charging condition has been added, 
the program moves to step S283, where the CPU 1 1 
writes the corresponding fee in the billing log.. At step 
S284. the CPU 1 1 causes the CPU 32 to compute the 
hash values of the entire music number database for 
storage in the non-volatile memory 34. If it has been 
verified at step S282 that the playback time billing con- 
dition has not been added to the selected music 
number, the processing at steps slss and S284 is 
skipped. 

[0212] Referring to the flowchart of Fig.24, the 
processing of checking the playback conditions etc of 
the step S275 of Fig.23 is explained. At step S301, the 
CPU 1 1 reads out the variable conditions of the music 
number database. At step S302, the CPU 1 1 checks 
whether or not the number of times of reproduction has 
surpassed the limit number of times. If the result of 
check is YES, the program moves to step S303 where 
the selected music number is deleted from the HDD 21 , 
at the same time as the information on the selected 
music number is deleted from the music number data- 
base. At step S304. the CPU 1 1 causes the CPU 32 to 
compute the new hash value of the music number data- 
base to store the computed hash value in the non-vola- 
tile memory 34. In this case, the playback output is 
inhibited. 

[021 3] If, at step S302, the number of times of play- 
back is verified to be less than the limit value, the pro- 
gram moves to step S305, where the CPU 1 1 verifies 
whether or not the date and time of playback end is past 
the current date and time. If, at step S303, the date and 
time of playback end is past the cun-ent date and time, 
the selected music number is deleted from the hard 
HDD21, whilst the con-esponding information is deleted 
from the music number database . At step S304, the 
hash values of the new music number database are 
computed and stored. In this case, the playback output 
is inhibited. 

[0214] If it has been verified at step S305 that the 
date and time of playback end is not past the current 
date and time, the program moves to step S306, where 
the CPU 32 verifies whether or not the playback time 
billing condition has been added to the selected music 
number. If the playback time billing condition has been 
added to the selected music number, the program 
moves to step S307, where the CPU 1 1 causes the 
message to the effect that the playback time billing con- 
dition has been added and the fee to be demonstrated 
on the display 20. If it has been verified that the play- 
back time billing condition has not been added to the 
selected music number at step S306, the processing at 
step S307 is skipped. 

[0215] Referring to the flowchart of Figs.25A and 
25B, the processing of outputting, that is reproducing, 
the music data from the HDD 21 via the portable device 
6, by the CPU 1 1 executing the contents management 
program 111 and by the CPU 53 executing the main 



program, is explained. At steps S321 to S325, the music 
number database is checked as to possible alteration of 
the music number database, designation of the selected 
musical number and the playback condition of the 
5 selected music number, whilst the selected music 
number is specified. This processing is not explained 
specifically since it is similar to that of steps S271 to 
S275 of Fig.23A. 

[0216] At step S326, reciprocal authentication 
w processing is executed between the portable device 6 
and the personal computer 1 so that a session key is co- 
owned by the portable device 6 and the personal com- 
puter 1 . At step S327, the CPU 1 1 of the personal com- 
puter 1 commands the portable device 6 to reproduce 
15 the encrypt^ed audio data now sent thereto. At step 
S328, the CPU 11 reads out the filename of the 
selected music number specified at step S324 to read 
out the music data of the filename from the HDD 21. 
The CPU 1 1 at step S329 executes the processing of 
20 converting the encoding system, encryption system or 
the format of the music data into those of the portable 
device 6. At step S330. the CPU 1 1 encrypts the music 
data, converted at step S329, with the session key. to 
transfer the encrypted data to the portable device 6. 
25 [0217] At step S331. the CPU 53 of the portable 
device 6 is responsive to the command transferred at 
step S327 from the personal computer 1 to decode the 
transferred data with the session key to reproduce and: 
output the decoded data. At step S332, the CPU 1 1 
30 increments the number of times of playback count of the 
music number database by one. At step S333, the CPU 
1 1 verifies whether or not the playback time billing con- 
dition has been added to the selected music number. If 
the result of check is YES, the fee is written at step S334 
35 in the billing log. At step S335. the CPU 1 1 causes the 
CPU 32 to newly compute and store the hash values of 
the entire music number database. If the result of check 
is NO, that is if the playback time billing condition has 
not been added to the selected music number, the 
40 processing at steps S334 and S335 is skipped. 

[0218] According to the present invention, various 
elaborate techniques are used to prevent illicit duplica- 
tion of the musical data. For example, the program for 
actuating the CPU 11 is a so-called tamer- resisting soft- 
45 ware in which the sequence of program execution is 
changed each time the program is executed. 
[0219] Moreover, part of the function of the CPU 1 1 
is performed by the adapter 26 as hardware, so that the 
various processing is executed by cooperation of the 
50 CPU and the adapter to improve operational safety. 
[0220] For example, the hash values of the music 
number database are not saved in the music number 
database itself, but are saved in the non-volatile mem- 
ory 34 of the adapter 26. That is. past hash values to be 
55 referred to for comparison with the hash values saved 
last time, such as at steps S32 or S33 of Fig.8, are 
saved in the non-volatile memory 34. Thus, it is possible 
to prevent copying or movement in which, before the 
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musical data saved in the HDD 21 are copied on or 
moved to another recording medium, the recording con- 
tents of the HDD 21 are stored as backup data, and the 
latter data, kept as backup data in the HDD 21, is re- 
stored after copying or moving the music data saved in 5 
the HDD 21 to another recording medium. 
[0221] If, for example, as shown in Fig. 26, the 
music numbers A and B are saved in the HDD 21 . hash 
values con-esponding to the Infomiation of the music 
numbers A and B are saved in the non-volatile memory 10 
34. It Is now assumed that, in this state, recording data 
on the HDD 21 have been saved as backup in another 
recording medium. If, of the music numbers A and 8 
saved in the HDD 21. the music number A Is moved to 
another recording medium 252, only the music number 15 
8 is recorded on the HDD 21. Thus, the hash value in 
the non-volatile memory 34 is also changed to that cor- 
responding to the music number B. 
[0222] Thus, if the contents of the HDD 21 saved as 
backup on the recording medium 251 are re-stored on 20 
the HDD 21 so that the music numbers A and B are 
again saved on the HDD 21, the hash value computed 
from the information of the music number B is stored in 
the non-volatile memory 34. whilst the hash values 
computed from the music numbers A and B are not 25 
stored therein. Thus, at this time point, the hash value 
based on the music numbers A and B stored on the 
HDD 21 cease to be coincident with the past hash value 
stored in the non-volatile memory 34, thus indicating 
that the music number database has been altered. The 30 
result Is that limitations are subsequently imposed on 
the use of the music numbers A and B saved on the 
HDD 21. 

[0223] Also, the RTC 35 is enclosed in the adapter 
26. The time information in this RTC 35 is corrected 35 
based on the time information transferred from another 
device, such as EMD server 4, for which the correct 
result of authentication has been obtained. The current 
date and time used is not that supervised by the per- 
sonal computer 1. Rather, the current date and time 4o 
used is that outputted by the RTC 35. Thus, it is not pos- 
sible for the user to correct the current time of the per- 
sonal computer 1 to a past time with malignant intention 
so as to evade the verification of the playback end time 
as the playback condition. 45 
[0224] Also, the adapter 26 is configured for decod- 
ing the encrypted and transferred program in accord- 
ance with the program stored in the ROM 36 from the 
outset to execute the program to improve operational 
safety. This will be explained by refenlng to the flowchart so 
of Rg,27. 

[0225] That is, if it is desired for the personal com- 
puter 1 to execute pre-set processing on the adapter 26, 
the personal computer 1 at step S351 encrypts the pro- 
gram to be executed by the adapter 26, using the 55 
encryption key pre-stored in the Ram 13. to transfer the 
encrypted program to the adapter 26. There is pre- 
stored in the ROM 36 of the adapter 36 the program for 



decoding and executing the encrypted program trans- 
ferred from the personal computer 1 . The CPU 32 at 
step S352 decodes the encrypted program, transferred 
from the personal computer 1 , in accordance with the 
program stored in the ROM 36. The CPU 32 at step 
S313 expands the decoded program in the RAM 33. 
The CPU 32 at step S354 executes the expanded pro- 
gram. 

[0226] When the CPU 1 1 of the personal computer 
1 causes the adapter 26 to compute the hash value of 
the music number database of the HDD 21 , the CPU 1 1 
encrypts the data of the music number database with 
the encryption key to transfer the encrypted data to the 
CPU 32 of the adapter 26. The CPU 32 applies the hash 
function to the transferred data of the music number 
database to compute the hash value. The computed 
hash value is stored in the non-volatile memory 34. 
Alternatively, the hash value is compared to the past 
hash value previously stored and transmits the result of 
comparison to the CPU 1 1 of the personal computer 1. 
[0227] Fig.28 shows a more specified structure of 
the inside of the adapter 26. The adapter 26 includes a 
RAM controller 261 for controlling the writing and read- 
out to or from the RAM 33 and a logic circuit 262, in 
addition to the interface 31 , CPU 32, RAM 33, non-vola- 
tile memory 34. RTC 35 and the ROM 36 shown in 
Fig.3. The logic circuit 262 is used for such processing 
in which encrypted music data is deciphered and the 
resulting deciphered data is directly outputted from the 
adapter 26. 

[0228] The above components from the interface 31 
to the ROM 36, RAM controller 261 and the logic circuit 
262 are built into the inside of the semiconductor IC so 
as not to be dismounted from outside. 
[0229] A quartz oscillator 271 is used for generating 
reference clocks in the execution the various processing 
by the adapter 26. An oscillation circuit 272 is an oscil- 
lation circuit for operating the RTC 35. The battery 273 
feeds the backup power for the oscillation circuit 272, 
non-volatile memory 34 and the RTC 35. Other circuits 
of the adapter 26 are fed with the power from a power 
source supplying circuit 281 of the personal computer 1 . 
[0230] The non-volatile memory 34 can be con- 
structed by a write-erase ROM. However, if the RAM is 
constructed by the RAM supported by the backup 
power source from the battery 273, it is possible to pro- 
vide a protective aluminum layer 291 on the non-volatile 
memory 34 and to provide a power source pattern 292. 
supplying the power from the battery 273 to the non-vol- 
atile memory 34, so that the power source pattern 292 
will be flush with the protective aluminum layer 291 as 
shown in Fig 29A and 298, By so doing, if it is attempted 
to delete the protective aluminum layer 291 , the power 
source pattern 292, lying on the same plane as that of 
the protective aluminum layer 291, is also deleted, so 
that the power supply to the non-volatile memory 34 is 
interrupted to erase the Inner stored data. This structure 
improves tamper-resisting properties more significantly. 
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[0231] As also shown in Fig.30, interconnections 
301-1 to 301-3 for data writing or readout to or from the 
non-volatile memory 34 are formed so as to be superim- 
posed one on another in the vertical (depth-wise) direc- 
tion. In such structure, the upper interconnections 301- 5 
1 and 301-2 need to be removed in order to read out 
data from the lower interconnection 301-3, so that data 
cannot be read simultaneously from the plural intercon- 
nections 301-1 to 301-3. Moreover. If the interconnec- 
tions 301-1 to 301-3 are provided redundantly and 10 
probed directly, it may be rendered difficult to analyze 
the contents by the resulting additional capacitance. 
[0232] In the foregoing, the portable device 6 is 
used as a recording medium. The present invention 
can, however, be applied to transferring or copying data ts 
to other recording mediums. 

[0233] The data may also be picture data or other 
data in place of the music data. 

[0234] As described above, the present invention 
gives to the following meritorious effects: 20 

(1) Since the data can be recorded encrypted on 
the HDD 21. while the encryption key is also 
encrypted with the storage key and recorded on the 
HDD 21, ifthe music data, recorded on the HDD 21, 25 
is copied, it cannot be decoded, so that it is possible 

to prevent duplication from being distributed in large 
quantities. 

(2) Since a pre-set musical number and its record- 30 
ing date and time are registered on the musical 
number database, so that, ifthe musical number is 
copied once, it cannot be copied for a pre-set time, 

48 hours in the illustrated embodiment, as from the 
time of copying. It is possible in this manner to limit 35 
the number of times of copying to prevent duplica- 
tions from being distributed in large quantities. 

Moreover, the hash values of the data are com- 
puted and saved each time the database is inno- 
vated, thus facilitating prevention of data 40 
falsification. 

(3) If once the music data is transferred to an exter- 
nal device, the music data on the HDD 21 Is erased, 

so that original digital music data is not left in the 45 
HDD 21 to prevent the. duplications from being dis- 
tributed in large quantities. 

(4) Since the music number database is provided In 

the HDD 21. and the entire hash value is checked so 
each time, the data of the originating side can be 
erased reliably even if the contents of the HDD is 
supported directly before the movement, and the 
data, thus supported, are re-stored in the HDD 21 
directly following the movement,. 55 

(5) Since reciprocal authentication is earned out 
before the personal computer 1 hands over the data 



to the external equipment, data can be prevented 
from being handed over to an unauthorized equip- 
ment. 

(6) Since it is verified by reciprocal authentication 
whether or not the software of the personal compu- 
ter 1 is legal, before transferring data from the 
external equipment to the personal computer 1, 
music data can be prevented from being transferred 
to the unauthorized software. 

(7) Since the ISRC is used in verifying the identity of 
the musical number and the TOC is used if the 
ISRC cannot be acquired, the Identity of the musi- 
cal number can be verified even although the ISRC 
cannot be acquired. 

(8) Since a pre-set portion of the software function 
in the personal computer 1 is borne by the adapter 
externally mounted on the personal computer 1 , the 
overall processing cannot be comprehended if sim- 
ply the software of the personal computer 1 is ana- 
lyzed, with the result that it is difficult to modify the 
software to impart a desired function to the soft- 
ware. 

[0235] Meanwhile, the processing executed by the 
adapter 26 can also be executed by the CPU 11 by a? 
secure program. In such case, the personal computer 1 
downloads the current time data from a particular server 
connected to the network 2, such as EMD registration 
server 3, for use in place of the cunrent time supplied by 
the RC 35 of the adapter 26, to execute the decision 
processing based on this current time. It Is also possible 
for the personal computer to store the current time at 
regular time intervals to display an error without accept- 
ing time setting, if the time previous to the memorized 
time is set. 

[0236] Although the above-described operating 
sequence can be executed by hardware. It can also be 
implemented by software. In the latter case, the soft- 
ware constituting the software is installed from a pro- 
gram storage medium to a computer having a dedicated 
hardware or to a general-purpose personal computer 
capable of executing a variety of functions on installing 
variable programs. 

[0237] The program storage medium, installed on a • 
computer and which can be executed by the computer, 
may be exemplified by a magnetic disc 41 , inclusive of a 
floppy disc, an optical disc 42, inclusive of a CD-ROM* 
(Compact Disc-Read Only Memory) and a DVD (Digital 
Versatile Disc), a magneto-optical disc 43. including a 
MD (Mini-Disc), a package media comprising a semi- 
conductor memory 44, a ROM 12 in which a program 
can be transiently or permanently stored, and a HDD 
21. The program is stored in the program storage 
medium by exploiting wired or radio communication 
medium, such as a network, e.g., local area network or 
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the Internet 2 or a digital/satellite broadcasting. 
[0238] In the present specification, the steps 
describing the programs stored in the program storage 
medium includes not only the processing carried out 
chronologically in accordance with the pre-set s 
sequence, but also the processing which is executed in 
parallel or batch-wise without necessarily being exe- 
cuted chronologically. 

[0239] In the present specification, the system 
means an entire device constructed by plural devices. io 
[0240] In the information processing method and 
apparatus and the program storage medium, according 
to the present invention, the time information at the time 
of duplication is stored in association with the content 
discrimination information, with the result that duplica- i5 
tions in large quantities can be substantially prohibited 
without significantly impairing the interests of the user. 

Claims 

20 

1. An information processing apparatus comprising: 

storage means for storing the information for 
discriminating contents and the time informa- 
tion for the time the contents have been dupli- 25 
cated; 

acquisition means for acquiring the information 
for discriminating contents to be duplicated; 
and 

duplication means for duplicating the contents 30 
in association with the discrimination informa- 
tion acquired by said acquisition means and 
the time information held in said storage 
means. 

35 

2. An information processing method comprising: 

a storage step for storing the information for 
discriminating contents and the time informa- 
tion for the time the contents have been dupli- ao 
cated; 

an acquisition step for acquiring the information 
for discriminating contents to be duplicated; 
and 

a duplication step for duplicating the contents 4S 
in association with the discrimination informa- 
tion acquired by said acquisition step and the 
time information held in said storage step. 

3. A program storage medium having stored therein a so 
computer-readable program, said program com- 
prising: 

a storage step for storing the information for 
discriminating contents and the time informa- 55 
tion for the time the contents have been dupli- 
cated; 

an acquisition step for acquiring the information 



for discriminating contents to be duplicated; 
and 

a duplication step for duplicating the contents 
in association with the discrimination informa- 
tion acquired by said acquisition step and the 
time information held in said storage step. 

Amended claims under Art. 19.1 PCT 

1 . An Infonmation processing apparatus comprising: 

storage means for storing the infomriation for 
discriminating contents and the time infonma- 
tion for the time the contents have been dupli- 
cated; 

acquisition means for acquiring the information 
for discriminating contents to be duplicated; 
and 

duplication means for duplicating the contents 
in association with the discrimination informa- 
tion acquired by said acquisition means and 
the time information held in said storage 
means. 

2. An Information processing method comprising: 

a storage step for storing the information for 
discriminating contents and the time infomna- 
tion for the time the contents have been dupli- 
cated; 

an acquisition step for acquiring the information 
for discriminating contents to be duplicated; 
and 

a duplication step for duplicating the contents 
in association with the discrimination informa- 
tion acquired by said acquisition step and the 
time Infomnation held in said storage step. 

3. A program storage medium having stored therein 
a computer-readable program, said program com- 
prising: 

a storage step for storing the information for 
discriminating contents and the time informa- 
tion for the time the contents have been dupli- 
cated; 

an acquisition step for acquiring the information 
for discriminating contents to be duplicated; 
and 

a duplication step for duplicating the contents 
in association with the discrimination infomna- 
tion acquired by said acquisition step and the 
time information held in said storage step. 

4. (added) The information processing method 
according to claim 2 

wherein 
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said contents are reproduced from an informa- 
tion storage medium. 

5. (added) The information processing method 
according to claim 4 5 

wherein 

said information recording medium is a com- 
pact disc memorizing the music infonmation. 

10 

6. (added) The information processing method 
according to claim 2 

wherein 

the discriminming information for discriminating 15 
the contents is the ISRC (International Stand- 
ard Recording Code). 

7. (added) The information processing method 
according to claim 2 20 

wherein 

the discriminating information for discriminating 
the contents is the TOC (fable of Contents), 

25 

8. (added) The information processing method 
according to claim 2 

wherein 

the ISRC (International Standard Recording 30 
Code) as the discriminating information for dis- 
criminating the contents is read out at said stor- 
age step from the information recording 
medium and, if the ISRC is not stored in said 
information recording medium, data of the TOC 35 
(Table of Contents) is utilized as said discrimi- 
nating Infomnation. 

9. (added) The information processing method 
according to claim 2 40 

wherein 

the discriminating information and said tempo- 
ral information are memorized in association 
with each other in a terminal database at said 45 
storage step. 

10. (added) The information processing method 
according to claim 9 further comprising: 

50 

a step of checking data in said terminal data- 
base: said checking step detecting possible 
modification using a hash function. 

11. (added) The information processing method 55 
according to claim 2 

wherein said duplicating step further 
includes a decision step of comparing the current 



temporal information to the temporal information of 
the memorized contents when the discriminating 
information of said contents acquired at said acqui- 
sition step is detected to have been memorized in 
the past in said storage step to verify whether or not 
a time period not less than a pre-set time has 
elapsed. 

12. (added) The information processing method 
according to claim 1 1 

wherein 

if, as a result of decision at said decision step, 
said pre-set time has not elapsed, duplication 
is prohibited. 

13. (added) The information processing method 
according to claim 1 1 

wherein 

if, as a result of decision at said decision step, 
said pre-set time has not elapsed, a watermark 
in said contents is detected and duplication 
processing is executed based on said water- 
mark. 

14. (added) An information processing method 
used in an information processing apparatus hav- 
ing a database in which a discriminating code for' 
discriminating contents duplicated in the past and 
the temporal data as to the time of duplication of 
said contents are stored in association with each 
other, said method comprising: 

an acquisition step of acquiring a discriminat- 
ing code of contents about to be duplicated; 
a decision step of determining whether or not 
said discriminating code acquired at said 
acquisition step has already been stored in 
said database; 

a comparison step of comparing the current 
temporal information with the temporal data 
stored in said database in association with said 
current temporal information when said dis- 
criminating code is determined by said deci- 
sion step to be already stored in said database; 
and 

a decision step of verifying whether or not a 
time period not shorter than a pre-set time has 
elapsed since the temporal data stored in said 
comparison step until the current time; 
wherein 

if, as a result of said decision step, the time 
period not shorter than a pre-set time has not 
elapsed, the duplication of said contents is pro- 
hibited. 
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